Vulnerability Management Process

The structured approach to identify, assess, and address vulnerabilities helps Silicon Motion timely coordinate internally to handle any security threats.

• STEP 1

  Monitor Threat Intelligence

  We continuously monitor vulnerability information from multiple resources and aspects.

  • CVE (Common Vulnerabilities and Exposures)
  • Customer Reports
  • External Reports
  • Vendor Advisories
• STEP 2

  Assess with Risk Prioritization

  We analyze the reported vulnerabilities and prioritize the risk level with appropriate ways, each finding will be evaluated based on exposure and potential impact.

  • Impact and Exploitability Analysis
  • Risk Evaluation and Rating
  • Vulnerability Prioritization
• STEP 3

  Action, Remediation and Mitigation

  We develop and implement suitable remediations or mitigations controls.

  • Patch Development
  • Mitigation Actions
  • Security Verification
  • Change Management
• STEP 4

  Communicate

  We keep communication open with affected customers and stakeholders.

  • Disclosure Policy
  • Customer Notification with Relevant Updates
• STEP 5

  Improve

  We review and improve our process continuously to consistently deliver high-quality services.

  • Lessons Learned
  • Process Enhancement
  • Cybersecurity Response Capability Improvement

Core Objectives of Silicon Motion PSIRT

Our pledge to enhance product cybersecurity, conformance and continuous improvement.

• Security First

  We proactively manage vulnerabilities to protect our customers, products and data with risk-based prioritization and compensating controls.

• Compliance

  Our process aligns with CRA and ISO/SAE 21434 to meet regulatory requirements.

• Continuous Improvement

  We learn, improve and evolve our PSIRT process to address threats effectively, and continuously monitor emerging security risks.

Report a Potential Security Vulnerability