Receiving and analysing reports
We carefully investigate any reports we receive regarding vulnerabilities and security incidents.
What is PSIRT?
PSIRT stands for Product Security Incident Response Team. It is a key component of the Cyber Resilience Act (CRA), which requires companies to address security incidents and vulnerabilities in products swiftly and transparently.
With PSIRT, we ensure that you, as a customer, always have a point of contact to report security-related issues and obtain information.
Our Product Security Incident Response Team is the central body at LAPP responsible for the security of our products. If a vulnerability is discovered, PSIRT ensures that it is investigated, assessed and rectified.
Our aim: to minimise risks for our customers and ensure clear communication. You can rest assured that reports will be handled in a structured and confidential manner.
The main tasks of our PSIRT
Assessing risks and prioritising measures
Each report is assessed according to its severity and impact in order to determine the appropriate course of action.
Coordinating updates and patches
We work closely with our development teams to deliver solutions quickly.
Transparent communication
We keep customers, partners and – where necessary – the authorities informed about the status and the measures being taken.
Why is this important?
The demands on IT and product security are increasing. The CRA sets out clear requirements: manufacturers must document, assess and communicate security incidents.
Our PSIRT supports you in minimising risks and ensuring compliance.
What does this mean for you?
- Greater security: products are developed in accordance with clear security standards.
- Transparency: Security information and updates are clearly communicated.
- Reliable processes: With PSIRT, you have a single point of contact for reports and information.
- Compliance: Manufacturers such as LAPP are obliged to rectify vulnerabilities quickly and inform the relevant authorities.
What is the Cyber Resilience Act (CRA)?
The Cyber Resilience Act (CRA) is an EU regulation setting out mandatory security requirements for products containing digital components.
Manufacturers must address security vulnerabilities promptly and report incidents.
For customers, this means greater transparency and enhanced security.
You will receive confirmation of your submission. Our PSIRT team will review the report and inform you of the next steps.
We will confirm your submission within 2–5 working days and keep you updated on its progress.
Yes, all information will be used solely for the purpose of dealing with this incident and will be handled in accordance with data protection guidelines.
If the security vulnerability is classified as relevant, we will arrange for a CVE to be assigned and inform you.
All products with digital components manufactured by LAPP.