Security Vulnerabilities Management
The Renac Product Network Security Processing Team (PNSPT) is dedicated to addressing security vulnerabilities in Renac products. These vulnerabilities cause harm. PNSPT commits to managing security issues according to relevant standards, reducing vulnerabilities, and providing timely risk mitigations.
Key Commitments
1. Vulnerability Management
- Reduce and eliminate security risks for customers
- Provide prompt risk mitigations after discovering vulnerabilities
- Identify and manage responsibilities, including legal, contractual, and public standards
- Continuously improve processes and standards based on industry best practices.
2. Reporting Vulnerabilities
- Encourages reporting from security researchers, organizations, customers, and suppliers.
- Reports should include a description, product model, software version, and contact information via email to service@renacpower.com
- Maintain confidentiality until a solution is available
3. Vulnerability Response
- After receiving the vulnerability report, we will analyze it and reply to the customer within 7 days.
- Develop and prioritize remediation strategies, including patches and risk mitigations. When the vulnerability is confirmed, we will provide a fixing plan with vulnerability and verify it, and issue updates within 90 days
- Work with suppliers for vulnerability remediation when necessary.
4. Confidentiality and Data Protection
- Ensure information is shared only among relevant handlers
- Protect data and maintain confidentiality until solutions are provided.
- Comply with legal requirements and protect obtained data.
5. Service Term Statement
The equipment manufacturer commit to providing ongoing updates and maintenance of software and security features for three years after product release.ending on May 29, 2029. The support period is extended, it will be updated in time later, after the security update support period is released, it will not be shortened later.
PNSPT ensures a proactive and responsible approach to managing security vulnerabilities, aiming to maintain the quality of Renac products and services.
Official Website:https://www.renacpower.com/safety/
