---
title: "AVAT | CVD Policy: Coordinated Vulnerability Disclosure"
description: Process for the coordinated disclosure of vulnerabilities - with the goal to address vulnerabilities in a structured manner.
image: https://support.avat.de/hubfs/AVAT_CVD-Policy_Coordinated-Vulnerability-Disclosure.png
---
- **DE - Germany**
- [EN - International](https://www.avat.de/en/)
Choose your Language
- [Contact](https://www.avat.de/en/contact)
- [Downloads](https://www.avat.de/en/downloads)
- [AVAT TRANSFER](https://transfer.avat.de/)
- Language
- [DE](https://knowhow.avat.de)
- [EN](https://knowhow.avat.de/en/)
- [English](https://support.avat.de/en/cvd-policy)
- [Deutsch](https://support.avat.de/cvd-richtline)
[](https://www.avat.de/en)
[](https://www.avat.de/)
PattieMenü
Pattie
- [News](https://www.avat.de/en/news)
- [News | Press](https://www.avat.de/en/news/news)
- [Events | Fairs](https://www.avat.de/en/news/events-fairs)
- [TECHsessions](https://www.avat.de/en/news/techsessions)
- [Solutions](https://www.avat.de/en/solutions)
- [Energy Systems](https://www.avat.de/en/solutions/energy-systems)
- [Consulting & Planning](https://www.avat.de/en/solutions/energy-systems/consulting-planning)
- [Energy & Engineering](https://www.avat.de/en/solutions/energy-systems/energy-engineering)
- [Realization & Operation](https://www.avat.de/en/solutions/energy-systems/realization-operation)
- [Support & Service](https://www.avat.de/en/solutions/energy-systems/support-service)
- [Energy Generation](https://www.avat.de/en/solutions/energy-generation)
- [Gas Energie Controls](https://www.avat.de/en/solutions/energy-generation/gas-engine-controls)
- [Control Components](https://www.avat.de/en/solutions/energy-generation/control-components)
- [Virtual Services](https://www.avat.de/en/solutions/energy-generation/virtual-services)
- [Energy Supply](https://www.avat.de/en/solutions/energy-supply)
- [Heat Grid Control](https://www.avat.de/en/solutions/energy-supply/heat-grid-control)
- [Energy Stations Control](https://www.avat.de/en/solutions/energy-supply/energy-stations-control)
- [Substation Heat Control](https://www.avat.de/en/solutions/energy-supply/substation-heat-control)
- [Energy Management](https://www.avat.de/en/solutions/energy-management)
- [Management System](https://www.avat.de/en/solutions/energy-management/management-system)
- [Data Acquisition](https://www.avat.de/en/solutions/energy-management/data-acquisition)
- [Energy Optimization](https://www.avat.de/en/solutions/energy-optimization)
- [Virtual Power Plants](https://www.avat.de/en/solutions/energy-optimization/virtual-power-plants)
- [Plant Optimization](https://www.avat.de/en/solutions/energy-optimization/plant-optimization)
- [Gateways](https://www.avat.de/en/solutions/energy-optimization/gateways)
- [Energy Innovations](https://www.avat.de/en/solutions/energy-innovations)
- [Flexibilization](https://www.avat.de/en/flexibilization)
- [Hydrogen H2](https://www.avat.de/en/hydrogen)
- [References](https://www.avat.de/en/references)
- [Energy Generation](https://www.avat.de/en/references/energy-generation)
- [Energy Supply](https://www.avat.de/en/references/energy-supply)
- [Energy Management](https://www.avat.de/en/references/energy-management)
- [Energy Optimization](https://www.avat.de/en/references/energy-optimization)
- [Company](https://www.avat.de/en/company)
- [About us](https://www.avat.de/en/company/about-us)
- [Identity](https://www.avat.de/en/company/identity)
- [Engagement](https://www.avat.de/en/company/engagement)
- [Quality](https://www.avat.de/en/company/quality)
- [History](https://www.avat.de/en/company/history)
- [Contact](https://www.avat.de/en/contact)
[Kontakt](https://www.avat.de/kontakt)
[Mail](mailto:avat@avat.de)
[LinkedIn](https://www.linkedin.com/company/avat-automation-gmbh)
[YouTube](https://www.youtube.com/channel/UCQn_KYi0YEsaDPrPzSAmihg)
[XING](https://www.xing.com/pages/avatautomationgmbh)
## Live-Webinar Freitag 08. Dezember 2023
# "Modernisierung und Ausbau von Wärmenetze bis zum Verbund"
## CVD Policy
# Coordinated Vulnerability Disclosure
AVAT follows a Coordinated Vulnerability Disclosure (CVD) process. Our goal is to capture, assess, and remediate reported vulnerabilities in a structured way, and to share information in a manner that protects operators and users while avoiding undue risk to plant operations.
### Principles
Our CVD process is built on the following principles:
- Confidential handling of vulnerability reports
- Objective and timely review of incoming reports
- Risk-based assessment of each reported vulnerability
- Coordinated alignment on workarounds, fixes, and disclosure
- Consideration of availability, safety, maintenance windows, and installed-base environments
- Appropriate notification of affected customers and users where action is required
### Typical handling process
1. Intake and registration
The report is logged and checked for completeness and relevance.
2. Triage
We determine whether there is a genuine security relevance, which products are affected, and how critical the report is.
3. Technical analysis
Our responsible experts analyze the root cause, exploitability, impact, and the affected versions or configurations.
4. Assessment and decision
AVAT determines which measures are required.
5. Coordinating disclosure
The timing and scope of any disclosure are chosen so that diagnosis and countermeasures can, wherever possible, be in place before broad publication.
6. Communication and closure
Where possible and permitted, reporters are kept informed of progress. Once measures have been implemented, the case is documented and tracked internally.
### How to submit a report
To report a vulnerability, please use the contact channels listed on our [reporting page](https://support.avat.de/en/report-of-vulnerabilities?hsLang=en).
Martin Ameling
Bei AVAT berät Martin Ameling Energieversorger und Industriebetriebe bei der Dekarbonisierung ihrer Energiesysteme. Ob für einzelne Energiezentralen oder gesamte Wärmeverbundnetzen – er begleitet unsere Kunden von der Planung bis zur technischen Umsetzung und automatisierten Optimierung der Strom- und Wärmeversorgung.
E-Mail: [Martin.Ameling@avat.de](mailto:Martin.Ameling@avat.de)
Khouschnaf Ibrahim
Khouschnaf Ibrahim ist Mathematiker und Energieexperte mit über 20 Jahren Erfahrung in der Energiewirtschaft. 2020 gründete er mit drei Partnern die Unigy GmbH, welche Stadtwerke und Regionalversorger dabei unterstützt, EE- Anlagen in ihr Portfolio zu integrieren und mit KI und Algotrading erfolgreich zu vermarkten.
E-Mail: [Martin.Ameling@avat.de](mailto:Martin.Ameling@avat.de)
##### Service & Support
**Technical Support**
+49 7071 9735-69
[support(at)avat.de](https://www.avat.de/#)
**Consulting & Sales**
+49 7071 9735-379
[sales(at)avat.de](https://www.avat.de/#)
**Human Resources**
+49 7071 9735-444
[jobs(at)avat.de](https://www.avat.de/#)
##### Social Media
##### Our solutions
- [Energy Generation](https://www.avat.de/en/solutions/energy-generation)
- [Gas Engine Controls](https://www.avat.de/en/solutions/energy-generation/gas-engine-controls)
- [Control Components](https://www.avat.de/en/solutions/energy-generation/control-components)
- [Virtual Services](https://www.avat.de/en/solutions/energy-generation/virtual-services)
- [Energy Supply](https://www.avat.de/en/solutions/energy-supply)
- [Heat Grid Control](https://www.avat.de/en/solutions/energy-supply/heat-grid-control)
- [Energy Stations Control](https://www.avat.de/en/solutions/energy-supply/energy-stations-control)
- [Substation Heat Control](https://www.avat.de/en/solutions/energy-supply/substation-heat-control)
- [Energy Management](https://www.avat.de/en/solutions/energy-management)
- [Management System](https://www.avat.de/en/solutions/energy-management/management-system)
- [Data Acquisition](https://www.avat.de/en/solutions/energy-management/data-acquisition)
- [Energy Optimization](https://www.avat.de/en/solutions/energy-optimization)
- [Virtual Power Plants](https://www.avat.de/en/solutions/energy-optimization/virtual-power-plants)
- [Plant Optimization](https://www.avat.de/en/solutions/energy-optimization/plant-optimization)
- [Gateways](https://www.avat.de/en/solutions/energy-optimization/gateways)
- [Energy Innovations](https://www.avat.de/en/solutions/energy-innovations)
- [Flexibilization](https://www.avat.de/en/flexibilization)
- [Hydrogen H2](https://www.avat.de/en/hydrogen)
AVAT Automation - The Energy Engineering Company
- [Data protection](https://www.avat.de/en/data-protection)
- [Imprint](https://www.avat.de/en/imprint)
- [Reports](https://support.avat.de/en/report-of-vulnerabilities)
- [Sitemap](https://knowhow.avat.de/en/)
- [Change cookie settings](https://www.avat.de/en/data-protection)
-  [DE](https://support.avat.de/?hsLang=de)
-  EN
**Privacy Settings**
We use cookies and other technologies on our website. Some of them are necessary for the operation of the website and do not require your consent. In addition, we use optional cookies for analysis and marketing purposes and other third-party tools. We use these only after your consent according to § 25 para (1) TDDDG, Art. 6 para (1) lit. a) GDPR. You can find more information about the use of your data in our [privacy policy](https://support.avat.de/en/data-protection?hsLang=en).
By pressing the button "ACCEPT" you agree to the use of all optional cookies. Furthermore, you can allow an individual selection. If you are under 16 and wish to give your consent to optional services, you must ask your parent or guardian for permission.
This consent is voluntary, not necessary for the use of this website and can be revoked or changed at any time by clicking on the link "Change cookie settings" in the footer of the website.
- External media
- Marketing
- Statistics
- Necessary cookies
Change settings
Only necessary cookies
**ACCEPT**
**Necessary cookies**
Necessary cookies enable basic functions and are required for the proper functioning of the website.
Consent cookie
**Name:** cookie\_consent
**Provider:** AVAT Automation GmbH
**Purpose:** This cookie stores the selected consent options of the user
**Cookie duration:** 1 Year
**Statistics**
Statistics Cookies collect information anonymously. This information helps us understand how our visitors use our website.
Google Analytics
**Name:** \_ga
**Provider:** Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
**Purpose:** Erhebung von Statistiken zur Website-Nutzung
**Cookie duration:** 24 Months
Matomo Analytics \[Self Hosting\]
**Name:** \_pk
**Provider:** AVAT Automation GmbH
**Purpose:** Erhebung von Statistiken zur Webseiten-Nutzung
**Cookie duration:** 30 Days
**Marketing**
Marketing cookies are used by third parties to display personalized advertising. They do this by tracking visitors across websites.
Hubspot
**Name:** hubspotutk
**Provider:** HubSpot, Inc. 25 First Street , 2nd Floor, Cambridge MA 02141 US
**Purpose:** Marketing
**Cookie duration:** 13 Month
**External media**
In order to display content from video platforms and social media platforms, cookies are set by these external media.
YouTube
**Name:** NID
**Provider:** Google LLC
**Purpose:** Play video content
Save settings
[Imprint](https://support.avat.de/en/imprint?hsLang=en) | [Datapolicy](https://support.avat.de/en/data-protection?hsLang=en)