Responsible Disclosure
The practice of privately reporting discovered vulnerabilities or harmful behaviours in AI systems to the developer before making them public, allowing time for remediation.
In plain language
When you find a problem in someone's AI, you tell them privately first and give them time to fix it before going public. It is the polite and responsible way to report vulnerabilities.
Why this matters
Responsible disclosure is a governance best practice that should be part of your AI security policy. Establishing clear channels for reporting AI vulnerabilities encourages ethical reporting, protects users from harm during remediation and reduces the reputational damage from public disclosure of unpatched flaws.
Relevance
GovernanceOrganisations should establish responsible disclosure policies and dedicated reporting channels for AI vulnerabilities, enabling researchers and security professionals to report risks confidentially and giving the organisation time to remediate before public disclosure.
Related terms
Putting responsible disclosure into practice in your organisation?
Ready to transform your AI strategy?
Partner with Australia's AI strategy and governance specialists. From adoption roadmaps to ISO 42001 audit readiness.