Receiving and analysing reports
We carefully investigate any reports we receive regarding vulnerabilities and security incidents.
What is PSIRT?
PSIRT stands for Product Security Incident Response Team. It is a key component of the Cyber Resilience Act (CRA), which requires companies to deal with security incidents and vulnerabilities in products promptly and transparently.
With PSIRT, we ensure that you, as a customer, always have a point of contact to which you can report security-related issues and obtain information.
Our Product Security Incident Response Team is the central body at LAPP responsible for the security of our products. If a vulnerability is discovered, PSIRT ensures that it is investigated, assessed and rectified.
Our aim: to minimise risks for our customers and ensure clear communication. You can rest assured that reports will be handled in a structured and confidential manner.
The main tasks of our PSIRT
Assessing risks and prioritising measures
Each report is assessed according to its severity and impact in order to determine the appropriate course of action.
Coordinating updates and patches
We work closely with our development teams to deliver solutions quickly.
Transparent communication
We keep customers, partners and – where necessary – the authorities informed about the status and the measures being taken.
Why is that important?
The demands placed on IT and product security are increasing. The CRA sets out clear guidelines: manufacturers must document, assess and communicate security incidents.
Our PSIRT helps you to minimise risks and ensure compliance.
What does this mean for you?
- Greater safety: Products are developed in accordance with clear safety standards.
- Transparency: Safety information and updates are clearly communicated.
- Reliable processes: With PSIRT, you have a single point of contact for reports and information.
- Compliance: Manufacturers such as LAPP are obliged to rectify vulnerabilities promptly and to inform the relevant authorities.
What is the Cyber Resilience Act (CRA)?
The Cyber Resilience Act (CRA) is an EU regulation setting out mandatory security requirements for products containing digital components.
Manufacturers must address security vulnerabilities promptly and report incidents.
For customers, this means greater transparency and enhanced security.
FAQs
You will receive confirmation of receipt. Our PSIRT team will review the report and let you know what the next steps are.
We will confirm receipt within 2–5 working days and keep you updated on our progress.
Yes, all information will be used solely for the purpose of dealing with the incident and will be handled in accordance with our privacy policy.
If the vulnerability is classified as relevant, we will arrange for a CVE to be assigned and inform you.
All products with digital components manufactured by LAPP.