Use story: vendor initiated coordination.

[chandanbn]

User story: A vendor wants to share and coordinate a vulnerability with select other vendors.

Current capability: Looks like this can be done by reporting a new issue and then requesting CERT/CC assistance on potentially affected vendors.

Possible incremental enhancement: https://kb.cert.org/vince/comm/report/ --> "Do you believe multiple vendors are affected?" could be enhanced to pick select vendors, have them notified or included in the case immediately.

Ability to directly create and manage cases and access lists would be great.

[ahouseholder]

Can you please clarify if/how this is different from #4?

[chandanbn]

#4 is about expanding the social network of vendors on the VINCE platform via invites or nominations. #3 is about a vendor acting as a reporter/coordinator to report a new case/vulnerability and select an audience of existing vendors on the platform.