This article outlines the steps taken by Scottish and Southern Electricity Networks and project partner Advanced Infrastructure to ensure that data held in the Local Energy Net Zero Accelerator platform is kept safe.
Our platform has been rigorously penetration tested and has stringent quality assurance
criteria. The software developer is certified with a number of recognised cybersecurity standards, including CyberEssentials Plus and ISO27001 Information Security. These certifications are audited by external organisations to ensure that the services provided are secure and data remains safe when test malicious attacks are carried out.
All data in the platform, in rest and transit, is encrypted. This means it is not possible for data to be intercepted or tracked maliciously.
Data is hosted locally, through credible providers who are internationally recognised and certified. This gives extra assurance that the hosting of data is safe.
On top of this, we have taken a number of measures to mitigate user account breaches:
Multi-factor Authentication - users require a six-digit code either via text message or Authenticator apps every time they log in. This means that even if a users' password is compromised, any attempts to log in would be unsuccessful without these codes.
Data permissions across users is determined by licensing, and access levels are determined through careful and collaborative conversation with relevant parties. For example, a public or open dataset may be available to read and download for everyone, but a local dataset may be accessible only to certain users. The permissions can also be broken down by read and write access per dataset - so some users may have read-only access to a dataset, whereas others who require download access can both read and download it. Users also have the option to upload data completely private to them.
Advanced Infrastructure also backup data in the platform regularly, so in the unlikely event a users' account was breached, a request to restore data can be submitted. Backup data is also encrypted in rest and transit.
We hope this helps! If you have any follow-up questions about data security in Local Energy Net Zero Accelerator, contact Advanced Infrastructure via live chat.
Please note: Specific details of security or encryption protocols cannot be shared, due to security reasons.