UK Product Security and Telecommunications Infrastructure Act (PSTI) R.2: Published point of contact for security issues

What does R.2 require?

For the product's hardware and software (including companion apps and cloud software used for the intended purpose, except for cellular smartphones and tablets), the manufacturer publishes at least one point of contact for reporting security issues across its relevant products, and when the reporter will receive an acknowledgement and status updates until resolution; the information is accessible, clear and transparent, available without request, in English, free and without requiring personal information.