{
  "id": "workflow:cve-response-coordination",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-security-research-deep.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "CVE Response Coordination",
    "workflowKind": "security",
    "triggerType": "event-driven",
    "typicalCadence": "per-cve",
    "complexity": "cross-team",
    "description": "Coordinates the organization's response to newly disclosed CVEs affecting\nits software stack -- monitoring advisory feeds (NVD, GitHub Security\nAdvisories, vendor bulletins), triaging by CVSS score and exploitability,\nmapping affected CVEs to internal services via SBOM, prioritizing patching\nby blast radius, coordinating emergency patch deployments, communicating\nstatus to stakeholders, and tracking remediation to closure within SLA.\nExcludes long-term vulnerability management strategy.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:cve-response-coordination",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "role:vulnerability-scanner",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "role:platform-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "role:incident-commander",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "skill-area:dependency-vulnerability-mgmt",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "skill-area:incident-response",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "domain:cybersecurity",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "responsibility:run-security-scans",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "responsibility:respond-incidents",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "responsibility:upgrade-dependencies-weekly",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "org-unit:application-security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:cve-response-coordination",
      "to": "org-unit:engineering",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}