Share

New program seeks to resolve vulnerabilities with shared responsibility among customers, partners and researchers

 
 

Continuing its commitment to promoting shared responsibility for safe and secure IoT deployments, PTC announces its Coordinated Vulnerability Disclosure Program. Designed to support reporting and remediation of security vulnerabilities that may affect the environments in which PTC products operate, PDVC serves the security-critical and industrial sectors.
 
The new program is a key component of PTC's Shared Responsibility Model, which defines a framework for cybersecurity collaboration with customers, partners and others in the industry. PTC CEO Jim Heppelmann invites partners and customers to work together with PTC to improve security by taking responsibility for the projects under their control.
 
As an extension of its Shared Responsibility Model, PTC's CVD Program seeks input from outside researchers who detect vulnerabilities in PTC's ThingWorx-branded products. PTC invites private individuals and organizations to report security vulnerabilities following a well-defined process that aligns with the National Telecommunications and Information Administration (NTIA) Security Working Group model. This program ensures that researchers can rely on PTC's cooperation to protect their clients and the public's safety/privacy.
 
The IoT market is at an inflection point, with spending expected to reach US $ 1.2 trillion by 2022, according to a recent IDC study. “As organizations continue to invest in IoT, it is equally important that efforts are made across their ecosystem to secure environments and endpoints,” said Stacy Crook, Director of IoT Research, IDC.
 
“Sophisticated, hyper-connected systems are fueling innovation at an unprecedented rate,” said Joshua Corman, senior vice president and director of security at PTC. “These conditions can potentially introduce new classes of accidents and adversaries. In this new world order, cybersecurity must become everyone's responsibility, and we need to work together to address these threats. PTC's CVD Program is a significant step towards this collaboration, inviting individuals and organizations to identify and communicate security vulnerabilities so that we can rapidly assess, mitigate and take corrective action to help further protect our security products and implementations. customers".

quick access

en_USEN