The security of our products and systems matters to us. Our aim is to identify digital risks at an early stage and incorporate appropriate safeguards into the development and ongoing improvement of our solutions.
We view cybersecurity as an ongoing responsibility. New technologies and evolving threats continually create new challenges for protecting data, devices and applications. We address these challenges through a careful and responsible approach to security.
If you discover a potential security vulnerability in one of our products or systems, please report it to office@prilogy-systems.at. Please report critical vulnerabilities or any signs of an ongoing attack immediately. Please keep security-sensitive information confidential so that potential risks can be assessed and appropriate measures coordinated.
Cyber Resilience Act (CRA)
The Cyber Resilience Act establishes mandatory cybersecurity requirements across the EU for products with digital elements. It covers secure development, vulnerability handling and the provision of security updates throughout the specified support period.
What are the key dates?
The main CRA requirements apply from 11 December 2027. Since 11 September 2026, manufacturers of products within its scope have been subject to reporting obligations for actively exploited vulnerabilities and security incidents.
Transitional provisions apply to products placed on the market before 11 December 2027. As a general rule, the other requirements apply to these products only if they undergo a substantial modification on or after that date. However, the reporting obligations also apply to existing products within the scope of the CRA.
Cybersecurity beyond development
The CRA treats cybersecurity as an ongoing responsibility. Alongside safeguards during development, it focuses on risk assessment, vulnerability handling and the provision of security-related information and updates.
Key principles include:
- Security by Design: Considering security from the outset of product development
- Secure by Default: Providing products with secure default settings
- Vulnerability Management: Systematically identifying, assessing and addressing security vulnerabilities
- Transparency: Providing clear information on secure use and the support period
These principles provide an important framework for the responsible development of digital products. Our aim is to address cybersecurity over the long term and provide our customers with clear, understandable information.