Teachme Biz routinely collects vulnerability information on the software and libraries it uses, regardless of whether they have been covered in the news, and implements necessary measures when an impact is identified.
When vulnerabilities in widely used software or libraries are reported in the news, Teachme Biz also assesses any potential impact under the same framework and implements countermeasures if an impact is identified.
Vulnerability Response
We have implemented a system to routinely detect CVE information for the libraries and other components we use, and we evaluate the need for action and its priority on a case-by-case basis, based on the detected vulnerabilities and their impact on our service.
If an impact is determined, we implement countermeasures such as applying patches.
For details on the vulnerability information collection and patch application processes, please refer to the applicable manual.
▼Is there a defined vulnerability management process and patch application frequency?
https://help.teachme.jp/hc/en-us/articles/5987761352345
Notifications When an Impact Is Identified
If there is an impact on your use of Teachme Biz, we will notify you by email and provide information via the Information bar within Teachme Biz and the Information section of the Help Center.
If there is an impact on service operation, we will also post it on the Status page.
Please note that, as a general rule, we do not provide individual notifications for vulnerabilities that have been confirmed to have no impact on Teachme Biz.
▼Teachme Series Status Page
https://status.teachme.jp/
▼How will I be notified when an outage or incident occurs?
https://help.teachme.jp/hc/en-us/articles/900006442063
Disclosure of Software in Use
From an information Security perspective, please note that, as a general rule, we do not disclose the programming languages, middleware, Library versions, or internal system configurations used in Teachme Biz.
▼Can the service architecture diagram be disclosed?
https://help.teachme.jp/hc/en-us/articles/10951372465817
----
Related:
Teachme Biz Security Measures (Service Website)
https://biz.teachme.jp/functions/security/
Teachme Biz Security Checklist
https://file.biz.teachme.jp/doc/teachmebiz_cloudservicelevel_checklist.pdf