Synology's Product Security Incident Response Team (PSIRT) is responsible for reacting to Synology's product security incidents. In this presentation, we will introduce how we embrace the CVE (Common Vulnerabilities and Exposures) ecosystem, how we collaborate with international organizations, and how we design and implement the SBoM (Software Bill of Materials) for automation and day-to-day incident response.