ISO/IEC 29147:2014

ISO/IEC 29147:2014 gives guidelines for the disclosure of potential
vulnerabilities in products and online services. It details the methods a vendor
should use to address issues related to vulnerability disclosure. ISO/IEC
29147:2014

  provides guidelines for vendors on how to receive information about
  potential vulnerabilities in their products or online services,
  provides guidelines for vendors on how to disseminate resolution
  information about vulnerabilities in their products or online services,
  provides the information items that should be produced through the
  implementation of a vendor's vulnerability disclosure process, and
  provides examples of content that should be included in the information
  items.
ISO/IEC 29147:2014 is applicable to vendors who respond to external reports
of vulnerabilities in their products or online services.