Bug bounty programs are conducted by organizations to permit cybersecurity enthusiasts and ethical hackers to find vulnerabilities in their applications. This is a strategy to crowd source the process of discovering vulnerabilities quickly. Participants of the bug bounty program mu vulnerabilities to the organization with supporting proofs. The organization will then validate the submitted proofs to confirm the presence vulnerability, they will reward the person who discovered & reported it$.$

Which of the following options is an essential component of such bug bounty programs?

Threat modeling

Configuration reyieus

Security awareness and training

Responsible disclosure programs and notices