The manufacturer has declared that the product complies with the Technical Guideline for mobile devices and that this has been tested.

The manufacturer has declared that the product has been tested in accordance with the Technical Guideline for Mobile Devices BSI TR-03180 A. He further declares that it meets all mandatory requirements of the aforementioned standard at the time of application and that it maintains them for the duration of the validity of the IT Security Label. In addition, the manufacturer declared that the recommended requirements of the aforementioned standard are also met at the time of application and maintained for the terms duration, unless a contrary declaration of justified deviations was submitted with this application.

The manufacturer commits to inform the BSI immediately of any known security vulnerabilities.

For the terms duration, the manufacturer assured to inform the Federal Office for Information Security unsolicited if the declared characteristics of the product change as soon as they become known to it, including (temporary) disruptions of the information security of the product and security vulnerabilities.

The manufacturer commits to immediately fix any vulnerabilities it is aware of and inform the BSI accordingly.

For the duration of the approval, the manufacturer also assured that it would immediately fix any security vulnerabilities it becomes aware of with regard to the labeled product and notify the Federal Office for Information Security (BSI) of the status of the measures taken to this end in accordance with § 3 Section 4 Sentence 2 BSI-ITSiKV (Ordinance on the IT Security Label of the German Federal Office for Information Security).

Endakkordion

Vulnerabilities and security updates

The manufacturer promises to keep its product up to date using secure procedures and to provide security updates. More about security updates [LINK]

Data hygiene and data security

The manufacturer guarantees that user data is used economically and can be easily deleted. User data required for operation is secured using modern technology and adequately protected against access by unauthorised persons. More about data security [LINK]

Permission and access management

The manufacturer guarantees that its device has a permission and access management system. This regulates the appropriate access of the operating system, apps, interfaces and sensors to the user data. More about rights management [LINK]

Interface security

The manufacturer assures that the communication connections of the product, i.e. interfaces such as radio, WiFi or Bluetooth, are cryptographically secured according to the current state of the art. More about interfaces [LINK]

Device security/access protection

The manufacturer declares that it has implemented mechanisms (such as PINs and passwords) to protect the product from unauthorised access. More about access protection [LINK]

Consumer friendliness and documentation

The manufacturer guarantees to design its device in a user-friendly way and to provide help texts to make it easier for users to utilize the device in a security-conscious manner. More about user friendliness [LINK]