Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

TRUST

Security Reporting

Provide a safe intake and escalation path for suspected vulnerabilities or security incidents while minimizing sensitive disclosure.

Owner: Security Operations
Scope: Security reports concerning Trusted Care
Status: Published control statement

01 / CONTROL

Control model

01

Report safely

Provide affected service/version, reproducible steps and impact; avoid unnecessary patient data or production secrets.

02

Triage

Validate scope/severity, assign owner and establish communication channel.

03

Remediation

Track containment/fix/verification through controlled change.

04

Closure

Retain accountable record of decision, remediation and reporter communication where appropriate.

02 / BOUNDARY

Responsibility boundary

This page describes the reporting process; emergency or patient-safety incidents must use the appropriate operational/clinical escalation channel.

03 / ESCALATION

Evidence and escalation

Report the affected service/version, reproducible steps and impact through the security channel; avoid patient data, tokens, passwords and unnecessary secrets.