The ICO Cloud organization maintains multiple open standard repositories. Security is a shared responsibility across all projects.

For security issues affecting any ICO Cloud project:

• Email: security@icoun.org
• GitHub: Open a private Security Advisory

• DPP-CQ Standard specification integrity
• ICOPC digital identity protocol
• OPPSCC Verifier reference implementation
• GICDP governance documents
• Organizational infrastructure

1. Acknowledgment: 48 hours
2. Triage: 7 days
3. Resolution: Target 30 days

We appreciate responsible disclosure and will acknowledge contributors in our security advisories (unless anonymity is requested).