Data center and network security

[JLehr]

Physical security

Facilities

The EcoStruxure IT servers are hosted in the United States on the Microsoft Azure Cloud, which is ISO 27001, HIPAA, FedRAMP, SOC 1, and SOC 2 certified. 

Learn more about Microsoft Azure facilities, premises and physical security

Network security

Logical Access

Access to the EcoStruxure IT Production Network is restricted by an explicit need-to-know basis, utilizes least privilege, is monitored, and is controlled by our Operations Team. Employees accessing the EcoStruxure IT Production Network are required to use multiple factors of authentication.

DDoS

As EcoStruxure IT is running on Microsoft Azure, Schneider Electric leverages their always-on traffic monitoring, and real-time mitigation of common network-level attacks, providing the same defenses utilized by Microsoft’s online services.

Third Party Security Penetration Testing

Schneider Electric continuously employs a rotating number of 3rd party certified hackers to perform detailed penetration tests of the entire EcoStruxure IT platform. 

Learn more about our security test report sharing policy

Monitoring

EcoStruxure IT is maintained and operated by a core DevOps team with extremely high standards for cyber security and data privacy. All parts of the EcoStruxure IT system are continuously monitored and scanned for potential security vulnerabilities or privacy issues.

The DevOps team is on-call 24/7 and able to react promptly to newly discovered threats or issues.

Encryption

Encryption in Transit

All connections to the EcoStruxure IT cloud are validated using an industry standard 2048 bit RSA certificate and data is encrypted in transit using 256 bit AES encryption.

For Android versions prior to 7.0, Schneider Electric can only guarantee 128 bit AES encryption due to limitations in the Android platform.

Encryption at Rest

EcoStruxure IT data is encrypted using 256 bit AES encryption.

Availability and Continuity

Uptime

EcoStruxure IT maintains a publicly available system-status webpage which includes system availability details, scheduled maintenance, service incident history, and relevant security events.

Redundancy

All components of the EcoStruxure IT platform are deployed in high availability configuration to eliminate single point of failure. All data is backed up to separate storage to prevent data loss.

See also

EcoStruxure IT security

Application security

Product security features 

Data privacy 

Subprocessors and subcontractors for EcoStruxure IT