Product Security Incident
Response Team (PSIRT)

Product Security Incident
Response Team (PSIRT)

The security of our products is a top priority for di-soric. Our Product Security Incident Response Team (PSIRT) is the central point of contact for receiving, assessing, and handling reports of potential security vulnerabilities in our products and software solutions.

The PSIRT analyzes incoming reports, assesses their impact, and coordinates appropriate measures together with our Development, Quality Management, and Product Management teams. These measures include technical investigation, risk-based prioritization, and the development and provision of appropriate security updates or recommended actions.

With a structured vulnerability management process, di-soric meets the requirements of the Cyber Resilience Act (CRA) and ensures that reported security incidents are handled transparently, promptly, and responsibly.

Information to Include in Your Security Report

To help us process your report quickly and efficiently, please provide
as much of the following information as possible:

• Product name and part number
• Firmware or software version
• Description of the suspected security vulnerability
• Steps to reproduce the issue
• Potential impact on confidentiality, integrity, or availability
• Any known workarounds or countermeasures
• Log files, screenshots, or other technical information (if available)
• Your contact details for any follow-up questions

The more complete the information you provide, the faster our PSIRT can
analyze and assess the reported vulnerability.

How We Handle Your Report Confidentially and Responsibly

After receiving your security report, our PSIRT will acknowledge receipt within the time frames specified by the Cyber Resilience Act.

The reported vulnerability is then subject to a technical review. We assess whether the report can be verified, which products are affected, and the level of security risk involved. If necessary, we will contact you to request additional information.

If a security vulnerability is confirmed, the PSIRT coordinates the development of appropriate countermeasures, such as firmware or software updates or technical recommendations. Affected customers are informed about available security measures in accordance with our processes.

Throughout the entire process, we treat all reports confidentially and keep the reporter informed
– where possible – about the progress of the investigation.

General Information About the Cyber Resilience Act (CRA)

The Cyber Resilience Act is the first European regulation to establish a minimum level of cybersecurity for all connected products made available on the EU market – something that did not previously exist. Its aim is to strengthen cybersecurity across the European Union. The new requirements apply in all EU Member States and are being implemented gradually.

Link to the German Federal Office for Information Security: CRA Explained Simply