امنیت و افشای مسئولانه

• 1.1 This policy covers the Reports sites published at therisk.global/nexus-reports/, globalriskforum.com/nexus-reports/, globalriskalliance.com/nexus-reports/, nexustandards.com/nexus-reports/ and risksacademy.com/nexus-reports/ (together, the Site), the forms and interfaces they offer and the public repositories from which they are built. Third-party services that the pages request, listed in the cookie and storage notice, are covered by their own providers’ policies.

• 2.1 Send a report to فرم تماس. Describe the vulnerability, the address or component affected, the steps to reproduce it and its likely impact.
• 2.2 Do not include exploit code, personal information, passwords or access keys in a first message. An encrypted channel is arranged on request.

• 3.1 Access, keep or disclose no more data than is needed to show the vulnerability, and stop and report at once if personal information is reached.
• 3.2 Do not modify or delete data, degrade a Service, run denial-of-service or volumetric tests, use social engineering or phishing, attempt physical access, or test the سامانه‌های of third parties.
• 3.3 Give the publisher reasonable time to fix the vulnerability before any public disclosure, and agree the date of disclosure with it. Disclosure is coordinated, and the reporter is credited if the reporter wishes.

• 4.1 GCRI Canada will not bring legal action against, or refer to law enforcement, a person who reports a vulnerability in good faith and follows this policy, and will treat that research as authorised for the purposes of its own terms. This commitment cannot bind third parties or authorities, and does not cover activity that breaches the law in a way this policy does not contemplate.

• 5.1 An acknowledgement with a reference, an assessment of the report, updates while the fix is made and notice when it is complete. Reports are handled confidentially and the reporter’s details are used only for the report.
• 5.2 No payment or reward is offered for reports.

• 6.1 Findings of automated scanners without a demonstrated impact, the absence of a best-practice setting without a demonstrated risk, reports about third-party services, and vulnerabilities that require a compromised device or an outdated browser.

• 7.1 An incident that affects personal information is handled, recorded and notified to the people affected and to the competent authorities as the privacy documents and the applicable law require.

Prepared for review by legal counsel before adoption.

• رایانامهGateway GW-GRFاز همین صفحه ارسال کنیدشواهد، اصلاحیه، مورد پژوهی، روش، بازبینی، ترجمه یا ورودی نمایه. با برچسب این صفحه می‌رسد تا ویراستار مسئول آن را دریافت کند.
• ⁨Zenodo⁩سپردهٔ بازآن را سپرده و به جامعه ارسال کنیدسابقهٔ خود را با شناسهٔ ORCID iD خود در Zenodo منتشر کنید و سپس آن را در همان‌جا به جامعهٔ Reports ارسال کنید. متصدیان آن را داوری می‌کنند؛ DOI از آنِ شما می‌ماند.
• گزارش‌ها⁨Global Risks Forum⁩ببینید چه میزی آنچه دارید را می‌پذیردجدول مسیریابی صفحهٔ مشارکت را باز می‌کند: آنچه دارید، میزی که آن را می‌پذیرد، شیوهٔ بازبینی و ذکر نام هر مشارکت، و پروانه.

هرگز داده‌های شخصی، جزئیات حساس زیرساختی یا چیزی را که حق تسهیم آن را ندارید نفرستید. مشارکت پیش از استفاده بازبینی می‌شود؛ ارسال آن هیچ حق تألیف یا ویراستاری ایجاد نمی‌کند و حمایت مالی هرگز یافته‌ای را نمی‌خرد.