Incident response

- Vulnerability disclosure process - Customer notification procedures - Patch release SLA - Compensating controls during remediation For each area provide: tools, exact commands, policy examples (OPA/Rego), and metrics. Include a supply chain security policy template and a SLSA framework mapping. Output as an assessment methodology document.