The Ministry of Industry and Information Technology issued the measures for the record Management of Network Product Security vulnerability Collection platform, which will come into effect on January 1 next year.

CTOnews.com, October 30, according to the website of the Ministry of Industry and Information Technology, the Ministry of Industry and Information Technology has now issued a notice on the issuance of the measures for the record Management of Network Product Security vulnerability Collection platform (hereinafter referred to as "measures").

CTOnews.com has learned that the "measures" make it clear that the so-called network product security vulnerability collection platform (hereinafter referred to as the vulnerability collection platform) refers to the public Internet platform set up by relevant organizations or individuals to collect security vulnerabilities in non-their own network products, except for the purpose of repairing security vulnerabilities in their own network products, networks and systems.

The measures point out that the filing of the vulnerability collection platform is carried out through the network security threats and vulnerability information sharing platform of the Ministry of Industry and Information Technology, and is carried out in the form of online filing. Organizations or individuals planning to establish a loophole collection platform shall truthfully fill in the registration information of the network product security loophole collection platform through the network security threat and vulnerability information sharing platform of the Ministry of Industry and Information Technology.

In addition, the loophole collection platform shall complete the filing before it is launched, and the loophole collection platform that has been put online shall be put on record within 10 working days from the date of implementation of the measures. The measures shall enter into force as of January 1, 2023.