Each company involved in developing and using industrial control systems should have a vulnerability disclosure policy, so the recommendations by ICSJWG in this newly released framework should be used for stepping up the current policy or setting up a new and improved one. The publication of this framework is a direct result of inconsistent disclosure policies that, according to ICSJWG, contributed to a public perception of disorganization within the ICS security community.