Anna Õuekallas: Becoming stronger through vulnerabilities – security is not a state, but a process

The opinion article discusses assessing the impact of vulnerabilities, timing the release of fixes, transparency, and learning from mistakes in Estonia’s digital state. For a recently publicly discussed vulnerability in ID software, assessment of its technical nature, likelihood of exploitation, and potential impact led to the conclusion that an emergency software update was not required; the fix was included in the next regularly scheduled release.