{"id":14535,"date":"2023-11-14T19:40:30","date_gmt":"2023-11-14T19:40:30","guid":{"rendered":"https:\/\/acist.com\/products\/product-security\/"},"modified":"2023-11-14T19:40:30","modified_gmt":"2023-11-14T19:40:30","slug":"product-security","status":"publish","type":"page","link":"https:\/\/acist.com\/int\/products\/product-security\/","title":{"rendered":"Product Security
Welcome to ACIST Medical Systems’ Product Security Portal<\/br><\/span>"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Product Security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWelcome to ACIST Medical
Systems’ Product Security
Portal\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Product Security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWelcome to ACIST Medical
Systems’ Product Security
Portal\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

ACIST Medical Systems\u2019 Coordinated Vulnerability Disclosure Program<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Through our relentless commitment to innovation, we optimize interventional decisions, equipping people with the power to get back to life. In support of this mission, we are committed to designing, manufacturing, and maintaining safe and secure medical devices. We recognize the role security researchers play to promote secure design practices within the medical device industry.<\/p>

Scope of Vulnerability Disclosure Program:\u00a0The Coordinated Vulnerability Disclosure Program applies to all commercially available ACIST Medical Systems software enabled products. This program is designed as a resource for security researchers to report security vulnerabilities to ACIST. \u200b<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Reporting Potential New Vulnerabilities<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To submit a potential new vulnerability to ACIST\u2019s Product Security Team, please send an encrypted email to BMT Product Security (BMT.ProductSecurity@bracco.com<\/a>) using this\u00a0PGP key<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When exchanging potential vulnerability information on an ACIST product, please contact us via email as soon as possible. Additional vulnerability disclosure program guidelines will be provided during the initial contact.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00b7 PGP Key ID: 0x2765D81414BFDDE1D839D2C5BD5BC4EBA13F8FC7<\/span>
\u00b7 Email: bmt.productsecuirty@bracco.com<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The coordinated vulnerability disclosure program is not designed for technical support information on ACIST products or for reporting adverse events or product quality complaints. If the discovered vulnerability or any other issue may have contributed to an adverse event, please make a report to customer.support@bracco.com<\/a> as vulnerability reporting alone is not intended to include the reporting of adverse event.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Submission guidelines<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
  • Keep confidential vulnerability details of all ACIST products.<\/li>
  • Promptly inform ACIST of any discovered vulnerability and any communications made to regulatory organizations or other third parties.<\/li>
  • Stay within the specified scope outlined in the Coordinated Vulnerability Disclosure Program.<\/li>
  • Do not publicly disclose without prior engagement with ACIST Medical Systems.<\/li>
  • Perform testing in a safe environment. Do not perform testing in active clinical settings where patient care is provided.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Timelines for ACIST response<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
    • ACIST will acknowledge receipt of submitted vulnerability details within five business days.<\/li>
    • ACIST may request additional information to validate submitted vulnerability.<\/li>
    • ACIST will communicate the internal process and expected timelines for each vulnerability submitted.<\/li>
    • ACIST will always communicate in writing, phone calls may occur during the evaluation process, but all official communication will originate in email from the BMT Product Security team. For instance, to validate a submitted vulnerability, ACIST will engage internal teams to assess the impact, investigate and define the product\u2019s remediation process and develop transparent expectations of the implementation timeline.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

      Product Security Welcome to ACIST Medical Systems’ Product Security Portal Product Security Welcome to ACIST Medical Systems’ Product Security Portal ACIST Medical Systems\u2019 Coordinated Vulnerability Disclosure Program Through our relentless commitment to innovation, we optimize interventional decisions, equipping people with the power to get back to life. In support of this mission, we are committed […]<\/p>\n","protected":false},"author":25,"featured_media":1205,"parent":99,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":"","_links_to":"","_links_to_target":""},"class_list":["post-14535","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/pages\/14535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/comments?post=14535"}],"version-history":[{"count":0,"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/pages\/14535\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/pages\/99"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/media\/1205"}],"wp:attachment":[{"href":"https:\/\/acist.com\/int\/wp-json\/wp\/v2\/media?parent=14535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}