docs/n1sdp : add guidelines for vulnerability reporting

Signed-off-by: Jagadeesh Ujja <jagadeesh.ujja@arm.com>
Change-Id: Icc24e7dec63c2c3f487872fb21450eb6f08f15fc

docs/n1sdp/change-log.rst

@@ -70,6 +70,8 @@ Disclaimer
 Support
 -------
 For support email: support-subsystem-enterprise@arm.com
+For reporting security vulnerabilities, please refer `Vulnerability reporting`_
+page.
 
 Change logs for the previous releases
 =====================================
@@ -80,6 +82,7 @@ Change logs for the previous releases
 .. _ARM Gitlab: https://gitlab.arm.com/arm-reference-solutions
 .. _Old Change Log: https://git.linaro.org/landing-teams/working/arm/arm-reference-platforms.git/tree/change-log.rst?h=n1sdp-v2
 .. _potential damage: https://community.arm.com/developer/tools-software/oss-platforms/w/docs/604/notice-potential-damage-to-n1sdp-boards-if-using-latest-firmware-release
+.. _Vulnerability reporting: docs/n1sdp/vulnerability-reporting.rst
 
 ----------
 

docs/n1sdp/vulnerability-reporting.rst

+*************************************
+Guidelines to Vulnerability reporting
+*************************************
+
+- The Neoverse N1 System Development Platform (N1SDP) stack is a
+  collection of open source software repositories. If you think you have
+  found a security vulnerability in a specific open source project which
+  is part of the software stack, it is recommended to follow the vulnerability
+  reporting guidelines specified by the respective project.
+
+- If you think you have found a security vulnerability as part of the
+  Neoverse N1 System Development Platform (N1SDP) software stack and it does
+  not fall into any specific open source project, then please report
+  by email at arm-security@arm.com specifying the project name as
+  "Neoverse N1 System Development Platform (N1SDP) Software".
+  More details can be found at `Arm Developer website`_.
+
+--------------
+
+*Copyright (c) 2021, Arm Limited. All rights reserved.*
+
+.. _Arm Developer website: https://developer.arm.com/support/arm-security-updates/report-security-vulnerabilities