An independent researcher privately reports a flaw in the city permit portal. What process should the city follow?
Select an answer to reveal the explanation.
Short Explanation
A good-faith report is a free heads-up—treat it with an ethical disclosure path: thank, validate, fix, communicate. Threats first, radio silence, or doxxing burn trust and leave citizens exposed.
Full Explanation
Ethical disclosure practices give organizations a structured way to receive external research, validate findings, remediate, and communicate appropriately. Immediate legal threats without analysis, ignoring reports, or retaliatory exposure of researchers undermine security and public trust. Permit portals handling citizen data particularly need a clear responsible-disclosure workflow.