Section 2.18 of the CU*Answers Policy Manual outlines our procedures for responding to reported vulnerabilities and includes notification information. Contact CU*Answers to receive a copy of this document.