Supplementary cybersecurity information for EUCC certified ePayments products
Information in accordance with the REGULATION (EU) 2019/881 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, art. 55:
(a)
To assist end users with the secure configuration, installation, deployment, operation and maintenance of the certified product, the relevant guidance and recommendations are made available as described in the Security Target (ST):
(b)
The security support will be offered to end users for as long as the certificate remains valid. The validity of the certificate, including the availability of cybersecurity related updates, can be verified at:
(c)
Giesecke+Devrient (G+D) is committed to addressing and resolving vulnerabilities to meet the needs of its customers and the broader technology community. The contact information of the manufacturer and the accepted methods for receiving vulnerability information from end users and security researchers are available at:
https://www.gi-de.com/en/contact/contact-of-security-emergency-response-team
(d)
An online repository listing publicly disclosed vulnerabilities, if any, is available on the ENISA dedicated website: