The Avaya Product Security Support Team (PSST) performs the following functions:

• Manages Avaya product vulnerabilities and threats.

• Maintains information posted at https://support.avaya.com/security.

• Performs security testing and auditing of the core products of Avaya.

• Resolves security-related field problems in support of Avaya Global Services.

• Manages the security at the securityalerts@avaya.com mailbox.

As a result, the PSST actively monitors security issues related to the following topics:

• Avaya products

• Products that are incorporated into Avaya products

• General data networking and telecommunications, as identified by government agencies

Before contacting Avaya on a security matter, please consult the Product Security Support Flow, which can be found at https://downloads.avaya.com/css/P8/documents/100161515. There is a link this document on the Avaya security support site at https://support.avaya.com/security.

When a security vulnerability is identified, the PSST determines susceptibility of Avaya products to those vulnerabilities and follows a process according to the Avaya's Product Security Vulnerability Response Policy, defined at https://downloads.avaya.com/css/P8/documents/100045520. Depending on the category of risk, the PSST creates an Avaya Security Advisory to notify customers of the vulnerability.