Security Update

• Scope — A Security Update is identified by Product, Version, Platform, Release, and the affected security scope.
• Pre-release verification — Security fixes must pass the applicable development, testing, Release Governance, and approval process before official release.
• PUBLISHED Release — An official Security Update is provided only through an approved Release in PUBLISHED status.
• Code Signing and Integrity — Security Update Packages use Platform-appropriate Code Signing, Artifact Integrity, and Package Verification controls.
• Distribution — Windows/macOS receive Security Updates through official Update/Download channels; Android through Google Play; iOS/iPadOS through the Apple App Store.
• Release Notes/Security Advisory — Where appropriate, Vietnam Office may publish affected Versions, remediation information, update recommendations, and installation guidance.
• Priority — Security Updates may be classified or prioritized according to risk severity, exploitability, and user impact.
• Update recommendation — Users should install eligible Security Updates within an appropriate timeframe to maintain a supported Vietnam Office security state.
• Version Entitlement — Security Update availability follows the applicable Version/support policy. Versions that are no longer supported may not continue to receive full Security Updates.
• Do not use unofficial Patches — Users should not use security Patches from unverifiable sources or modify official Packages.
• Emergency Security Release — In the event of a serious risk, Vietnam Office may prioritize a security remediation outside the normal Update schedule under the applicable controlled process.

Security Update principle: detect/verify issue → assess risk → develop remediation → test → approve → PUBLISH → distribute securely → guide users to update.