Manufacturer's declaration for the product category video conference services

Manufacturer's declaration for the product category video conferencing services
With its manufacturer's declaration, the service provider has assured the following points to the Federal Office for Information Security:
-
The service provider hereby declares that the video conferencing service subject of the application has been tested for compliance with DIN SPEC 27008 - „Basic Criteria Video Conferencing Services“ and in accordance with the associated annex ( Video Conferencing Services - Technical Specification und Conformity Assessment) and fulfils all mandatory requirements at the time of application and will continue to do so for the duration of the label validity. The applicant further declares that the recommended requirements of the aforementioned standard are also fulfilled at the time of application and will be maintained for the duration of the label validity, unless a statement to the contrary regarding justified deviations has been submitted with this application.
-
For the duration of the label validity, the service provider guarantees to inform the Federal Office for Information Security without being asked if the declared characteristics of the product change as soon as it becomes aware of them, including (temporary) disruptions to the information security of the video conferencing service and security gaps.
-
For the duration of the label validity, the service provider further assures that it will immediately rectify any security vulnerabilities it becomes aware of with regard to the video conferencing service and notify the Federal Office for Information Security of the status of the measures taken for this purpose in accordance with Section 3 (4) sentence 2 BSI-ITSiKV.