Draft CNA document for discussion

["Adinolfi, Daniel R" <dadinolfi@mitre.org>]

Folks,

I have uploaded this DRAFT CNA Information Sharing and Embargo Policies 
document to GitHub.

<http://cveproject.github.io/docs/cna/DRAFT%20-%20Information%20Sharing%20and%20Embargo%20Policies.docx>

The idea is to have each CNA describe when and to whom they will 
disclose information submitted to the CNA, both internally to the CNA 
and to the world.

The linked document is a starting point for that and will be part of 
the bigger CNA framework and documentation effort. (This is one of many 
documents we'll produce as part of that.) Please consider it a strawman 
to begin the discussion.

Thanks.

-Dan
_________________________
Daniel Adinolfi, CISSP
Lead Cybersecurity Engineer, The MITRE Corporation
J83D - Cyber Security Partnerships, Sharing, and Automation
Email: <dadinolfi@mitre.org>  Phone: 781-271-5774