how can you protect the privacy of your client and organization with regards to vulnerability disclosure?​