I'm reading the EU #NIS2 and one idea I really like, is that each Member State shall establish a way to anonymously report vulnerabilities to a CSIRT (that will handle the communication and disclosure).

#ResponsibleDisclosure #CoordinatedVulnerabilityDisclosure