Then they need to fix their process to be more agile in response to urgent problems. Not every hacker is going to be nice and give 90 days notice. Sometimes t

Then they need to fix their process to be more agile in response to urgent problems. Not every hacker is going to be nice and give 90 days notice. Sometimes the first notice you'll get is when a vulnerability is already being exploited in the wild. And if you takes you weeks just to begin to respond to that, then that's your problem.