● Vulnerability Reporting Contact Point : psirt@sic.shimano.co.jp
● Upon receipt of a report, we will, as a general rule, send an acknowledgement of receipt to the reporter within five (5) business days.
● The Shimano Group will assess reported vulnerability information and, where necessary, take measures such as the following, and will disclose vulnerability information without undue delay in accordance with applicable laws and regulations.
・Provision of corrected or updated software
・Provision of workarounds
・Publication of security advisories
・Reporting to the competent authorities or other relevant organisations in accordance with applicable laws and regulations
・Any other necessary corrective measures.
