Cyber and information security is of topmost importance to Infineon, our investors, customers, and partners. With ever growing national and international regulation and a diverse set of standards, coherent management of a corporate cybersecurity program is essential. Infineon has implemented a threat-intelligence-informed, adaptable global cybersecurity program together with a corresponding Cyber and Information Security Management System (CISMS). The program systematically identifies and manages relevant risk imposed to Infineon from the cyber domain. Additionally, it aims to be certifiable in respect to various national and international standards, while also enabling quick assurance of Infineon Technologies’ cybersecurity posture towards our customers and those standards relevant to their business environment.

Infineon appointed a Chief Information Security Officer (CISO). The CISO is supervised by the CDSO on board level. Additionally identified cybersecurity risks are managed as part of Infineon’s enterprise risk management and as such supervised by the risk committee and both CEO and CFO. 

The CISO directs and supervises the implementation of the cybersecurity program globally. The department reporting to the CISO, with an assigned organization of managers and experts, is part of the CDSO organization and is supervised by the Chief Digital and Sustainability Officer. The department is responsible for the implementation and operation of the Cyber and Information Security Management System (CISMS), its processes and requirements. The CISO is also globally in charge of Security Monitoring Operations (SOC) and Infineon’s incident response capacity (CSIRT) which are grouped within the cyber defense center.

Through our rigorous risk assessment, self-assessment, and external benchmarking we constantly review and optimize all relevant areas of the cybersecurity program. As a result, we continuously improve our security processes and measures and thereby empower our customers and business partners while strengthening trust. An independent inspection authority certified our CISMS according to various standards, depending on the requirements of the corresponding business sectors (e.g. ISO27001, GSMA, Common Criteria and IATF 16949, TISAX). Through internal and external audits and certification programs and dedicated supply chain management for both forward and backward supply chain we assure the effectiveness of our cybersecurity program, management system and controls. As such Infineon’s track record and current certifications and accreditations show that Infineon not only implements the lawful minimum requirements but go beyond as an active member of the international cybersecurity community.

Infineon operates an information security vulnerability assessment program to maintain high levels of system and application security across a diverse IT environment. The program defines the technologies and procedures required to implement a comprehensive and integrated approach for detecting, assessing, and remediating vulnerabilities in information systems, ensuring defined levels of security are maintained. 

Infineon’s cybersecurity policy encompasses key obligations to ensure the security and integrity of the company's data and systems, including continuous improvement of cybersecurity program, monitoring and responding to information security threats, establishing information security requirements for third parties.

The Cyber Awareness & Education program at Infineon includes variety of components to educate employees on cybersecurity best practices and raise awareness about potential cyber threats. Everyone with access to our information systems must participate in regular cyber and information security training, including mandatory web-based trainings and refresher courses. We also provide additional incident and trend-based awareness measures to ensure our employees are equipped to handle cybersecurity threats. Infineon has a clear escalation process requiring all employees to immediately report cybersecurity incidents, vulnerabilities, or suspicious activities to the Cyber Defense Center. Infineon Technologies established a global cybersecurity organization which also hosts the Infineon Cyber Defense Center, implementing an active defense approach to counter cyber-attacks. 

Downloads
Fast Big Data

Infineon Cyber Defense Center (CSIRT)

The Infineon Cyber Defense Center (CDC) is a dedicated team within Infineon’s cybersecurity organization, tasked to ensure the security of Infineon infrastructure. CDC monitors the current cyber threat landscape internally and externally. It advises the corporate IT organization and business functions to improve enterprise IT security and cyber and information security.

Our CSIRT/CERT team is responsible for coordinating the response to cybersecurity incidents or cyber-attacks. As such, the team acts as the central contact point for security researchers, industry groups, government organizations, and vendors to report potential cyber incidents or security vulnerabilities affecting services, systems, or infrastructure of Infineon Technologies or one of its subsidiaries.

More information on Infineon PSIRT

Contacting the Infineon cybersecurity team

Cybersecurity

Customer requests towards Infineon’s cybersecurity program and maturity

cybersecurity@infineon.com

S/MIME Supported

Cyber Defense Center

Main contact for potential security issues in respect to IT Infrastructure and Services

cert@infineon.com

DB26 0E75 D989 34EA A31D 68AF E636 149E A9E2 BDC9t

Additional contact data

Vulnerability notification process

CERT Infineon public PGP keyblock

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=cV0s

-----END PGP PUBLIC KEY BLOCK-----

Certifications & accreditation

Our cybersecurity program and management system is certified as part of our Quality Management System Certification.