{"id":137083,"date":"2024-07-16T15:29:09","date_gmt":"2024-07-16T13:29:09","guid":{"rendered":"https:\/\/symmedia.de\/?p=137083"},"modified":"2024-07-17T11:11:51","modified_gmt":"2024-07-17T09:11:51","slug":"sp-1-version-12-tuv-certified-as-trusted-product","status":"publish","type":"post","link":"https:\/\/symmedia.de\/de\/sp-1-version-12-tuv-zertifiziert-als-trusted-product\/","title":{"rendered":"SP\/1 Version 12 T\u00dcV zertifiziert als Trusted Product"},"content":{"rendered":"
\n<\/div>\n
\n<\/div>\n
\n

Like the previous main versions of symmedia SP\/1, Version 12.0.0 has been tested by T\u00dcViT and awarded the „Trusted Product“ certificate.<\/p>\n

symmedia SP\/1 thus continues to meet the product-specific security requirements as well as the requirements according to Security Assurance Level SEAL-3. The validity of the certificate is from Jan. 18, 2024 to Jan. 18, 2026 and for all future minor versions within the major version 12.<\/p>\n

The test contains all criteria according to SEAL-LEVEL 3 of the „Trusted Product“ test.<\/p>\n<\/div>\n

\n

These include:<\/h4>\n

Technical safety requirements:<\/u> <\/strong><\/p>\n

These must be clearly documented and verifiable, based on ISO\/IEC 17007, and meet the specific product requirements.<\/p>\n

Architecture and design:<\/u>\u00a0<\/strong><\/p>\n

The product must be comprehensibly structured, without conceptual weaknesses, and implement appropriate hardening and protection measures.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Development process:<\/u><\/strong><\/p>\n

A defined development lifecycle is required that includes phases such as planning, implementation, and maintenance, with special emphasis on vulnerability remediation and security testing.<\/p>\n

Vulnerability analysis and penetration tests:<\/u><\/strong><\/p>\n

The product must be robust enough to pass penetration tests and have no exploitable vulnerabilities.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

In addition to these testing areas, they also considered and checked further product-specific safety requirements:<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Identification & Authentication<\/strong><\/p>\n

This aspect checks whether the product provides mechanisms for the secure identification and authentication of users or entities.<\/p>\n

This means that only authorized users can access the system and that fake authentication data is detected and misuse is prevented. This increases the security and integrity of the data and prevents unauthorized access.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Restricted, role-based (RBAC), Access Control<\/strong><\/p>\n

Role Based Access Control (RBAC) is an access rights management system in which users are granted access to resources based on their roles in the organization. It helps to enforce security policies by ensuring that only authorized users can access certain data or applications. RBAC is important because it simplifies the management of user rights, reduces the risk of unauthorized access and supports compliance requirements.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Secure Transport Encryption<\/strong><\/p>\n

This check concerns the encryption of data during transmission via networks, e.g. using SSL \/ TLS. The implementation of secure transport encryption ensures that sensitive information is protected against interception and manipulation during transmission.<\/p>\n

SP\/1 version 12 is based on the latest version of transport encryption, TLS version 1.3.<\/p>\n

With the support of TLS version 1.3, the product supports the encryption standard according to IT basic protection and the recommendations of the Federal Office for Information Security (BSI) for cryptographic procedures (see: here<\/a>)<\/p>\n

Our customers benefit from increased confidentiality and integrity of their data during transmission, which minimizes the risk of data misuse or manipulation.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Data Flow Control<\/strong><\/p>\n

This aspect checks whether the product has implemented mechanisms to control and monitor the data flow. This includes, for example, checking and filtering incoming and outgoing data to ensure that only authorized data from approved connections is transmitted and potentially harmful or unwanted data is blocked.<\/p>\n

The advantage for the customer lies in the improved control over the data flow, which increases the security and integrity of the data and reduces the risk of data breaches.<\/p>\n<\/div>\n

\"\"<\/p>\n

\n

Logging \/ Audit Trail<\/strong><\/p>\n

This check relates to the implementation of logging and audit trail mechanisms that enable activities in the system to be logged and monitored.<\/p>\n

This allows user activities to be tracked and monitored, which increases transparency and helps to detect security incidents or compliance violations.<\/p>\n

Prologging is used here, a procedure in which log entries are provided with hash values, making it more difficult to manipulate log data, which increases integrity and improves the reliability of system monitoring.<\/p>\n

Customers benefit from improved traceability and can effectively investigate and respond to security incidents, which increases the overall security of the system.<\/p>\n<\/div>\n

\n
\n

We are happy to support you in your update processes. Our consulting team will be happy to answer any further questions you may have.<\/p>\n<\/div>\n

\"Consulting<\/p>\n