Hop til hovedindhold

D255 Security and Access Management

Document status35 - Reviewed

A Security and Access Overview must describe how satisfactory security is achieved in the solution, how known security risks can be handled and which user rights management must be used.

Security Development Lifecycle (SDL)​

We follow the principles from Microsoft's SDL, which can be found in an evergreen version here: Microsoft Security Development Lifecycle Practices

The methodology from Microsoft is very expansive and covers any possible situation. We have incorporated applicable components either in this design explicitly or via or build pipeline and its components, see O240 - Deployment Guide.

NIS2​

NIS2 is an EU regulation that has been implemented in Danish law, the so-called NIS2 act. The law itself is broad and covers a wide scope.

EnergyConnect's compliance with the NIS2 law is described in NIS2 documentation - Overview