GB/T 30276-2013 in English

《GB/T 30276-2013信息安全技术 信息安全漏洞管理规范》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会。
本标准规定了信息安全漏洞的管理要求,涉及漏洞的发现、利用、修复和公开等环节。
本标准适用于用户、厂商和漏洞管理组织进行信息安全漏洞的管理活动,包括漏洞的预防、收集、消减和发布。

Scope

This standard specifies the management requirements for information security vulnerabilities, involving the discovery, utilization, repair and disclosure of vulnerabilities. This standard is applicable to the management activities of information security vulnerabilities by users, vendors and vulnerability management organizations, including the prevention, collection, reduction and release of vulnerabilities.