This is regarding the Microsoft Security Response Center (A)" Case

1. What are the main issues surrounding this case?
2. Who are the main stakeholders that Culp should be concerned with?
3. Identify and prioritize the issues that Culp should be concerned with and develop a plan of action and a timeline
4. Not all hackers are as ethical as CyP. How do you reward him/her and encourage that behavior?
5. The public blames software companies for developing programs with vulnerabilities and then taking so long to provide solutions for vulnerabilities.
6. Should the companies take more time to develop software (to make sure that it is not vulnerable)? 
7. What are the arguments for or against providing source code to the public (e.g., Linux)?
8. Public perception (and confidence) is integral to sales. How can the information be released to the public without provoking the thought, "How many other vulnerabilities like this are there in other products?" Does the public have to know about the potential extent of the vulnerability?