Cyber-Security-Policy

Policy for the disclosure of product-related cybersecurity vulnerabilities

This policy of Hugo Brennenstuhl GmbH & Co. Kommanditgesellschaft defines the procedures and expectations for the detection, reporting and remediation of vulnerabilities in our products in accordance with the EN 303 645 standard (CYBER - Cybersecurity in the consumer area of the Internet of Things). It applies to all employees, partners and external security researchers who interact with our systems.

The purpose of this policy is:

• To ensure the safety and integrity of our products
• Promote collaboration with the security research community.
• Provide a clear and structured process for reporting and resolving vulnerabilities.

Policy_for_the_disclosure_of_product-related_cybersecurity_vulnerabilities_BRT.pdf