--- title: General Terms and Conditions description: Responsible Disclosure --- [![RB_B-Shape_White_Gradient_03_Digital](https://content.rolandberger.com/hs-fs/hubfs/04_Logos/Re-Branding%202023/RB_B-Shape_White_Gradient_03_Digital.png?width=72&height=100&name=RB_B-Shape_White_Gradient_03_Digital.png "RB_B-Shape_White_Gradient_03_Digital")](https://www.rolandberger.com) ![GMC_EventMarketing_LandingpageHeader_1600x500px-2](https://content.rolandberger.com/hubfs/GMC_EventMarketing_LandingpageHeader_1600x500px-2.jpg) #  Roland Berger         Responsible Disclosure **Vulnerability Disclosure Program @ Roland Berger** Roland Berger is committed to maintaining the security of its digital services. We welcome responsible security research and encourage the responsible disclosure of vulnerabilities found in our internet‑facing systems. This page describes what systems are in scope, how to report vulnerabilities, and the rules that apply when conducting security research. --- Scope In Scope Out of Scope --- **Rules of Engagement** **Researchers are expected to act in good faith and comply with the applicable laws as well as the following rules.** Researchers are expected to act in good faith and comply with the following rules. **Permitted Activities** **Prohibited Activities** --- **Safe Harbor** If you make a good‑faith effort to comply with this page, Roland Berger will consider your research to be authorized and does intend to pursue legal action for activities conducted in accordance with this page. Activities outside this page or conducted in bad faith may violate applicable laws (including §§202a–202c StGB). Roland Berger reserves all rights to pursue unauthorized activity and the damages incurred. We ask that you: --- **Reporting a Vulnerability** Please report vulnerabilities by email to: [informationsecurityofficer@rolandberger.com](mailto:informationsecurityofficer@rolandberger.com) Your report should include: --- **Disclosure Process & Timeline** Our process is as follows: **Acknowledgment** We aim to acknowledge reports within 5 business days. **Validation** Our IT Security team will assess and validate the reported issue. **Internal Coordination** Confirmed vulnerabilities are coordinated internally with relevant teams, including Communications where applicable. **Resolution** Once remediation is completed, we will inform the reporter. --- **Public Disclosure & Publication** Any public disclosure, publication, or presentation of a reported vulnerability must be explicitly agreed upon in advance with Roland Berger. Unauthorized public disclosure may result in exclusion from safe harbor protections. --- **Compensation** Roland Berger does not currently operate a bug bounty program. No financial compensation is offered for reported vulnerabilities unless explicitly stated otherwise. --- **Researcher Recognition** Researchers will generally receive personal acknowledgment Public recognition is not guaranteed and is assessed on a case‑by‑case basis Any public publications of findings as bug reports requires mutual agreement --- **Email & Phishing Notice** The only official Roland Berger email domain is @rolandberger.com. Emails claiming to represent Roland Berger from other domains should be treated as suspicious. Teilen Sie diese Seite [![](https://content.rolandberger.com/hubfs/release/assets/img/icons/linkedin.svg) ![](https://content.rolandberger.com/hubfs/release/assets/img/icons/linkedin_alt.svg)](https://www.linkedin.com/shareArticle?mini=true&url=https://content.rolandberger.com/en/responsible-disclosure&title=General%20Terms%20and%20Conditions&summary=Responsible%20Disclosure) [![](https://content.rolandberger.com/hubfs/release/assets/img/icons/twitter-1.svg) ![](https://content.rolandberger.com/hubfs/release/assets/img/icons/twitter_alt.svg)](https://twitter.com/share?url=https://content.rolandberger.com/en/responsible-disclosure&via=RolandBerger&related=RolandBerger&text=General%20Terms%20and%20Conditions) [![](https://content.rolandberger.com/hubfs/release/assets/img/icons/facebook.svg) ![](https://content.rolandberger.com/hubfs/release/assets/img/icons/facebook_alt.svg)](https://www.facebook.com/sharer/sharer.php?u=https://content.rolandberger.com/en/responsible-disclosure) [![](https://content.rolandberger.com/hubfs/release/assets/img/icons/mail.svg) ![](https://content.rolandberger.com/hubfs/release/assets/img/icons/mail_alt.svg)](mailto:?subject=&body=) ![Footer Logo Roland Berger](https://content.rolandberger.com/hs-fs/hubfs/04_Logos/Re-Branding%202023/RB_Wordmark_Black_Digital.png?height=62&name=RB_Wordmark_Black_Digital.png) Headquarters Munich Office Roland Berger GmbH Sederanger 1 80538 Munich Germany Phone: +49 89 9230-0 Fax: +49 89 9230-8202 Mail: [Send us a message](mailto:contact@rolandberger.com) - [Startseite](https://www.rolandberger.com/de/) - [Hilfe](https://www.rolandberger.com/de/Hilfe/) - [Impressum](https://www.rolandberger.com/de/Legal/) - [Datenschutz](https://www.rolandberger.com/de/Datenschutz/) Illustration: Getty Images ![](https://dc.ads.linkedin.com/collect/?pid=534401&fmt=gif)