CSAF CS03 - Statement of Use from BSI

["Schmidt, Thomas" <thomas.schmidt@bsi.bund.de>]

Dear colleagues,

Please find BSI's statement of use below.

 

Best regards,

Thomas

 

Statement of use

 

Federal Office for Information Security (BSI)

Godesberger Allee 185-189

53175 Bonn

Germany

 

General Statement

 

BSI has successfully used or implemented the Common Security Advisory Framework Version 2.0 CSAF producer [2], CSAF consumer [2] and CSAF basic validator [3] as specified in the CSAF specification [1] in accordance with the conformance clauses specified therein and OASIS policy.

 

Detailed Statement

 

BSI has successfully used, or implemented, a CSAF producer [2], CSAF consumer [2] and CSAF basic validator [3] supporting the stated functionality defined in the CSAF specification [1], in accordance with the conformance clauses specified therein.

 

BSI (CERT-Bund) has become a CSAF trusted provider satisfying the requirements defined in the CSAF specification [1]. The provider metadata is available at: https://wid.cert-bund.de/.well-known/csaf/provider-metadata.json

 

[1] Common Security Advisory Framework Version 2.0, Committee Specification 03, 01 August 2022, https://docs.oasis-open.org/csaf/csaf/v2.0/cs03/csaf-v2.0-cs03.md

[2] Secvisogram, https://github.com/secvisogram/secvisogram

[3] csaf-validator-lib, https://github.com/csaf-poc/csaf_distribution