Basic Policy on Product Security
Panasonic Industry Co., Ltd., Industrial Device Business Division (hereinafter referred to as the “Industrial Device Business Division”) recognizes ensuring product security throughout the entire product lifecycle and providing safe and reliable products to society as an important management responsibility.
To this end, we strive to systematically, comprehensively, and continuously manage product security across the entire product lifecycle—from planning, design, and development to mass production, maintenance, operation, end-of-support, and disposal—and to appropriately reduce and control product security risks.
Compliance with Laws and Standards Related to Product Security
The Industrial Device Business Division is committed to complying with product security laws and standards in various countries, including the EU Cyber Resilience Act (CRA). For details on the applicable laws and standards, please refer to the specifications and product pages of each product. In addition, for products of the Industrial Device Business Division, we have obtained certification to the international standard “IEC 62443-4-1,” which defines product lifecycle requirements for ensuring the security of industrial automation and control systems, and we operate our product lifecycle in accordance with these requirements.
Product Security Framework
The Industrial Device Business Division has established a product security framework and, in collaboration with Panasonic Industry Co., Ltd.’s PSIRT (Product Security Incident Response Team), has built a system capable of responding promptly and appropriately to product security issues.
Training and Education
The Industrial Device Business Division conducts necessary product security education annually to enhance each employee’s awareness of product security and promote behavioral changes. We provide training tailored to different target groups, such as by employee level (e.g., at the time of joining the company or promotion) as well as for all employees, including proper information management. Through these efforts, we strengthen our cybersecurity response capabilities.
Vulnerability Information
