Cybersecurity Information
Supplementary cybersecurity information for EUCC-certified products, including support, vulnerability reporting, and security advisories.
This page provides supplementary cybersecurity information for TOPPAN Security products certified under the European Union Common Criteria-based Cybersecurity Certification Scheme (EUCC).
The information published on this page is intended to support customers, integrators, certification bodies, security researchers and other stakeholders in the secure deployment, operation and maintenance of certified products. It also provides information on cybersecurity support, vulnerability reporting channels, vulnerability handling and relevant security advisories related to certified products.
EUCC Certified Products
The following TOPPAN Security products have been certified under the EUCC scheme.
| Product | Certificate | Certification Report | Security Target Lite |
|---|---|---|---|
| SOMA-ck025-A_1.0 | EUCC-XXXX | Coming soon | Coming soon |
| SOMA-ck025-B_1.0 | EUCC-XXXX | Coming soon | Coming soon |
| SOMA-ck025-C_1.0 | EUCC-XXXX | Coming soon | Coming soon |
Cybersecurity Support
The validity period of an EUCC certificate is established in accordance with the applicable EUCC regulatory framework and is currently set at five years from the date of certificate issuance.
TOPPAN Security maintains certified products throughout the validity period of the corresponding certificate. Further arrangements regarding product maintenance, updates and customer support are governed by the applicable agreements between TOPPAN Security and its customers.
For cybersecurity-related inquiries and vulnerability reporting, please contact:
TSItaly.certification@toppansecurity.com
To protect sensitive information, the email message shall be encrypted using the following key:
PGP Public Key
Download key- PGP Fingerprint
- B64E172F5A138A4508CEEA14CF2BC58494FEB7E1
To facilitate efficient assessment and handling of reported vulnerabilities, reports should include:
- A detailed description of the identified vulnerability or flaw;
- Steps to reproduce the issue, where known;
- Affected product version(s);
- Contact information of the reporter;
- Supporting evidence, such as screenshots, logs, test results, proof-of-concept material, or other relevant information.
Maintaining the Certified Cybersecurity Level
To preserve the certified cybersecurity level, users should:
- Use only certified product versions and configurations;
- Follow the guidance delivered with the product;
- Install approved updates where applicable.
TOPPAN Security maintains a vulnerability management and coordinated vulnerability disclosure process for its certified products. Reported vulnerabilities are recorded, analysed and assessed for their impact on certified products, and are addressed in accordance with the company's flaw remediation process.
Potential vulnerabilities may be reported through the channels provided in the Cybersecurity Support section above.
Security Advisories
Publicly disclosed vulnerabilities, when available, may be referenced through the European Vulnerability Database (EUVD) maintained by ENISA: