CORDA-2958 Security policy for corda

Author: jamesbr3

SECURITY.md

@@ -1,18 +1,21 @@
 # Security Policy
 
-## Supported Versions
+## Reporting a Vulnerability
 
-Security updates will be made for the following versions of Corda:
+Vulnerabilities in Corda can be reported by following the Corda responsible disclosure policy:
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 4.x     | :white_check_mark: |
-| 3.3.x   | :white_check_mark: |
-| < 3.3   | :x:                |
+https://www.corda.net/participate/security.html
 
-## Reporting a Vulnerability
+## Security Advisories
 
-Vulnerabilities in Corda can be reported by following the responsible disclosure policy:
+Security announcements affecting Corda will be published on the Corda mailing list. People can subscribe to corda-announce@groups.io to receive security updates when they are made available.
 
-https://www.corda.net/participate/security.html
+## Supported Versions
+
+Security updates are made for the latest version of Corda.
 
+| Version | Supported          |
+| ------- | ------------------ |
+| 4.x     | :white_check_mark: |
+| 3.x     | :x:                |
+| < 3     | :x:                |