Question $10$

Bug bounty programs are conducted by organizations to permit cybersecurity enthusiasts and ethical hackers to find vulnerabilities in their websites and applications. This is a strategy to crowd source the process of discovering vulnerabilities quickly. Participants of the bug bounty program must report their vulnerabilities to the organization with supporting proofs. The organization will then validate the submitted proofs to confirm the presence of the vulnerability, they will reward the person who discovered & reported it$.$

Which of the following options is an essential component of such bug bounty programs?

Threat modeling

Configuration review

Security awareness and training

Responsible disclosure programs and notices