User Story 2022_111

As a Vendor, I need to know which of my products, components, or services are affected by a vulnerability report so that I know what to fix.

Notes

(as of v0.4.0) You probably want SBOM, this protocol isn't going to help you with that problem.

Metadata

Following is additional information compiled from our original design materials. We are including it here for future reference and traceability.

---

• Potential future process or service: nan
• Roles: Vendor
• Phases: Validation and Prioritization, Analysis and Remediation
• Categories: Monitoring (incl. IR)

---

• File: story_2022_111.md
• Original ID: 135.0
• 2022 Whitepaper ID: nan
• Support Level: (as of v0.4.0) Out-of-scope