A cybersecurity blueprint

Human error is one of the major factors in data breaches. In fact, in a 2025 study, it was reported that human error contributes to 95% of breaches.

To counteract such incidents, businesses should develop a companywide approach to cybersecurity culture, education, and training that integrates elements of people, processes, and technology controls.

This approach should be complemented with customized training and awareness programs to suit diverse employee groups, including high-risk populations such as top management, human resources, finance and developers. With an aim to encourage each employee group to practice secure behaviors adapted to the risks associated with their roles.

To help enforce cyber controls, businesses have to embrace regulations in a transparent manner. Indeed, we believe that compliance results from a mature cybersecurity posture rather than a compliance-specific approach.

Practical examples include putting in place mandatory cybersecurity policies for all employees and contractors, designed to help them understand how to implement critical tasks securely. We have implemented a Cyber Risk Register to identify cyber risks across our digital, product, and operations landscape, assigning them to business, functional, and operational owners. Our commitment to product security includes an externally certified secure development lifecycle.

A wise approach consists in considering suppliers and partners as an extension of the company, and fostering strong and secure business-to-business relationships with them.

In practice, we maintain a resilient value chain through a comprehensive approach across key areas such as secure sourcing and market resilience through channel partner cybersecurity. We have third-party security principles with a tiered system for categorizing our suppliers through a comprehensive risk-based framework with mitigating controls. These controls comprise third-party components, business continuity impact, data access levels, customer-facing and internal system access, and impact on operations or intellectual property.

Transparency is the key to stakeholders’ trust and overall resilience. It is a core value at Schneider Electric, driving us to exceed regulatory requirements and customer expectations. Our commitment to transparency is evident in our routine disclosure of relevant data and documentation to both government authorities and customers – a practice that not only informs but builds trust through sustained, mutual communication channels.

Our Transparency Report, released twice a year, shares key metrics, data, and information about our company’s digital and security governance. Software attestations, product validations, and crisis simulations are additional initiatives that increase transparency and trust.