Responsible disclosure policy
ArtEZ University of the Arts handles its data carefully, making security a priority. Despite efforts to secure our systems, vulnerabilities may still arise. If you discover such a vulnerability, we encourage you to collaborate with us to resolve it promptly.
To prevent misuse of the data breach, we ask you to adhere to these guidelines:
- Report the issue by emailing ict@artez.nl;
- Refrain from actively exploiting the security flaw;
- Do not share information about the leak until the issue is resolved and delete any data obtained through the leak;
- Do not use any physical security attacks, social engineering, distributed denial of service, spam or third-party applications;
- Provide sufficient information for us to reproduce and resolve the issue quickly.
If you follow these guidelines, we commit to:
- Contact you within five business days to let you know how long the repair is expected to take;
- Not take any legal action against you regarding this disclosure;
- Treat your report confidentially and not share your personal data with third parties without your consent unless legally obligated. Reporting under pseudonym or anonymously is possible;
- Keep you informed about the progress of the issue's resolution;
- If desired, credit you as the discoverer of the issue in any communications about it.
We aim to resolve identified security flaws promptly. Should you wish to publish any information about the detected problem after it has been solved, we would like to be involved in this publication.