A network administrator discovers a critical vulnerability. Who should be notified first before a public disclosure?
-
A
Post immediately on social media to warn all users
-
B
Notify internal security and management stakeholders, then follow the organization's disclosure policy
-
C
Email the vendor without notifying internal management
-
D
File a public bug report immediately to pressure the vendor