The PSIRT Process at a Glance
Security-relevant information is welcome at all times, regardless of its origin. The PSIRT receives reports from partner companies, CERTs, security researchers, authorities, suppliers or individuals. No contractual agreements or non-disclosure agreements are required to make contact.
Confidential and Responsible Processing
All incoming reports will be treated as strictly confidential. Access to submitted information is restricted to authorized PSIRT personnel only. The identity of the reporting person will be treated confidentially and will only be disclosed with express consent.
The information is carefully checked after input. If necessary, the reporting persons are consulted to clarify additional details. Targeted measures are then initiated to protect the affected systems.
Contact with PSIRT
Cyber Resilience Act (CRA)
The structured and standard-compliant implementation of the CRA requirements is based on the established procedural model of VDI/VDE Guideline 2182. The model supports the systematic development of safe automation solutions.
This includes, but is not limited to:Risk analysis and assessment of protection requirements
Integration of security-by-design principles into development and lifecycle
Preparation of technical documentation in accordance with conformity requirements
Preparation for conformity assessment and CE marking