This policy is intended to give security researchers clear guidelines and a point of contact to directly submit their research findings if they believe they have found a potential security vulnerability within the Department of Foreign Affairs and Trade (DFAT).