Cyber and information security is of topmost importance to Infineon, our investors, customers, and partners. With ever growing national and international regulation and a diverse set of standards, coherent management of a corporate cybersecurity program is essential. Infineon has implemented a threat-intelligence-informed, adaptable global cybersecurity program together with a corresponding Cyber and Information Security Management System (CISMS). The program systematically identifies and manages relevant risk imposed to Infineon from the cyber domain. Additionally, it aims to be certifiable in respect to various national and international standards, while also enabling quick assurance of Infineon Technologies’ cybersecurity posture towards our customers and those standards relevant to their business environment.

Infineon appointed a Chief Information Security Officer (CISO). The CISO is supervised by the CDSO on board level. Additionally identified cybersecurity risks are managed as part of Infineon’s enterprise risk management and as such supervised by the risk committee and both CEO and CFO. 

The CISO directs and supervises the implementation of the cybersecurity program globally. The department reporting to the CISO, with an assigned organization of managers and experts, is part of the CDSO organization and is supervised by the Chief Digital and Sustainability Officer. The department is responsible for the implementation and operation of the Cyber and Information Security Management System (CISMS), its processes and requirements. The CISO is also globally in charge of Security Monitoring Operations (SOC) and Infineon’s incident response capacity (CSIRT) which are grouped within the cyber defense center.

Through our rigorous risk assessment, self-assessment, and external benchmarking we constantly review and optimize all relevant areas of the cybersecurity program. As a result, we continuously improve our security processes and measures and thereby empower our customers and business partners while strengthening trust. An independent inspection authority certified our CISMS according to various standards, depending on the requirements of the corresponding business sectors (e.g. ISO27001, GSMA, Common Criteria and IATF 16949, TISAX). Through internal and external audits and certification programs and dedicated supply chain management for both forward and backward supply chain we assure the effectiveness of our cybersecurity program, management system and controls. As such Infineon’s track record and current certifications and accreditations show that Infineon not only implements the lawful minimum requirements but go beyond as an active member of the international cybersecurity community.

Infineon operates an information security vulnerability assessment program to maintain high levels of system and application security across a diverse IT environment. The program defines the technologies and procedures required to implement a comprehensive and integrated approach for detecting, assessing, and remediating vulnerabilities in information systems, ensuring defined levels of security are maintained. 

Infineon’s cybersecurity policy encompasses key obligations to ensure the security and integrity of the company's data and systems, including continuous improvement of cybersecurity program, monitoring and responding to information security threats, establishing information security requirements for third parties.

The Cyber Awareness & Education program at Infineon includes variety of components to educate employees on cybersecurity best practices and raise awareness about potential cyber threats. Everyone with access to our information systems must participate in regular cyber and information security training, including mandatory web-based trainings and refresher courses. We also provide additional incident and trend-based awareness measures to ensure our employees are equipped to handle cybersecurity threats. Infineon has a clear escalation process requiring all employees to immediately report cybersecurity incidents, vulnerabilities, or suspicious activities to the Cyber Defense Center. Infineon Technologies established a global cybersecurity organization which also hosts the Infineon Cyber Defense Center, implementing an active defense approach to counter cyber-attacks. 

Downloads
Fast Big Data

Infineon Cyber Defense Center (CSIRT)

The Infineon Cyber Defense Center (CDC) is a dedicated team within Infineon’s cybersecurity organization, tasked to ensure the security of Infineon infrastructure. CDC monitors the current cyber threat landscape internally and externally. It advises the corporate IT organization and business functions to improve enterprise IT security and cyber and information security.

Our CSIRT/CERT team is responsible for coordinating the response to cybersecurity incidents or cyber-attacks. As such, the team acts as the central contact point for security researchers, industry groups, government organizations, and vendors to report potential cyber incidents or security vulnerabilities affecting services, systems, or infrastructure of Infineon Technologies or one of its subsidiaries.

More information on Infineon PSIRT

Contacting the Infineon cybersecurity team

Cybersecurity

Customer requests towards Infineon’s cybersecurity program and maturity

cybersecurity@infineon.com

S/MIME Supported

Cyber Defense Center

Main contact for potential security issues in respect to IT Infrastructure and Services

cert@infineon.com
CERT Infineon public PGP keyblock

Fingerprint DB26 0E75 D989 34EA A31D 68AF E636 149E A9E2 BDC9t

Additional contact data
Vulnerability notification process
Security Wall of Fame

Certifications & accreditation

Our cybersecurity program and management system is certified as part of our Quality Management System Certification.