CVD

It is the process for receiving, handling and publishing security vulnerabilities together with the people who report them. FDA expects device manufacturers to have one.