October marks Cyber Security Awareness Month, highlighting the importance of protecting connected systems against cyber threats. Every networked device, including Intercom stations, must meet the highest security expectations. With the EU Cyber Resilience Act (CRA), these expectations are becoming binding requirements for digital products.
At Commend, cyber security has long been part of our corporate and product strategy. Independent certifications demonstrate our commitment to maintaining high security standards. This month, we renewed our ISO 27001 and IEC 62443-4-1 certification. Additionally, a CyberVadis assessment also recognised our technical and process standards with a Gold Badge.
Beyond certification, security must prove itself in daily operations. Penetration tests, additional system hardening and local integration help address individual security requirements. Our vulnerability disclosure policy, including published security advisories supports transparent vulnerability management.
Continuous updates are another essential part of cyber security. Commend Upgrade Subscriptions help keep systems current, while the Symphony Cloud service Active Device Management enables automatic firmware updates for more efficiency.
These measures also reflect the CRA's focus on security throughout the product lifecycle. Its reporting obligations have applied since September 2026, with essential requirements following in December 2027.
Learn more about our approach to cyber security: