Cybersecurity along with data privacy and protection are key pillars of our Trust Charter as we seek to gain resilience and increase trust within our greater ecosystem.
Our global cybersecurity certifications
ISO 27001 demonstrates rigorous information security methodologies, reducing risks, and safeguarding against security breaches within Schneider Electric.
CREST Certification for Penetration testing acknowledges Schneider Electric’s product security teams for their skills and proficiency when it comes to testing the resilience and security of the company’s products and systems.
ISA/IEC 62443-4-1 certified Secure Development Lifecycle (SDL) process testifies that our products and systems development practices are in line across all software and system development lifecycles.
CyberVadis is a third-party cybersecurity risk assessment platform. Schneider Electric was certified mature based on international information security standards such as ISO 2700x, NIST Cybersecurity Framework, Cybersecurity for ICS, PCI DSS, and GDPR.
CyberGRX is a third-party cybersecurity risk assessment platform. The CyberGRX Framework Mapper covers industry frameworks and standards, such as NIST CSF, ISO 27001, PCI-DSS, etc. The assessment details Schneider Electric’s compliance with these industry standards and security protocols.
BitSight is a third-party cybersecurity ratings solution. The solution measures an organization's cybersecurity risk and security management effectiveness and provides data-driven, dynamic measurements of its cybersecurity performance
Our cybersecurity partnerships and publications
We work collaboratively with cross-industry organizations to enable digital trust:
- We are a founding member of the ISA Global Cybersecurity Alliance;
- We are a member of both the Paris Call and Cybersecurity Coalition;
- We are a signatory of the Cybersecurity Tech Accord;
- We are an active contributor to the World Economic Forum on cyber resilience.
Public reports are a product of these collaborations.
Why trust is at the center of everything
“Cybersecurity people are trained not to trust anything but need a little trust in each other to share keys to success” - Andre
