AMIS | Conclusion passes security assessment of Eneco’s IoT platform with flying colours 

AMIS | Conclusion developed a data platform for energy company Eneco, specifically designed to process IoT data. This data is generated by energy-producing and energy-consuming devices within Eneco’s network. Known as the Smart Grid platform, it provides the foundation for a smarter energy network. A recent security audit exceeded all expectations. We spoke with Albert Fisch, Product Owner for Domain Information Security Officers at Eneco, about the collaboration with AMIS | Conclusion: “I have rarely seen such a good security assessment report.”

First, back to basics: what exactly is the Smart Grid platform? The platform supports the development of new digital products and services that use data to improve comfort and the quality of Eneco’s customer experience. It processes energy production and consumption data from businesses and consumers who are Eneco customers or suppliers. It also analyses data from Eneco’s own network devices. Beyond transmitting detailed measurement data, the platform enables Eneco to control the network down to the smallest detail. This helps the energy supplier maintain the right balance and prevent energy waste, contributing to energy transition objectives. Given the platform’s purpose and use, properly implementing and monitoring security is essential to its reliability and safety.

Albert Fisch explains: “Eneco conducts an annual security audit of its critical systems, including the Smart Grid platform. The results are very positive. The independent assessment found no way to gain unauthorised access to the data. Should data nevertheless fall into the wrong hands, it is encrypted in such a way that it would be unusable. “The analysis shows that security is a central principle in the platform’s design and development. It also demonstrates that the platform has strong operational controls, including actively blocking unauthorised access and attempts to gain access. It uses strong Microsoft Azure security measures and encrypts data both at rest and in transit. As a result, the risk of compromising the platform, its data or its users is virtually zero. Overall, the platform’s security risk is minimal, and the team has demonstrated a clear vision for security.” “By treating collaboration with other parties as a true partnership, we keep this awareness firmly embedded.”

Albert explains that both the number of systems and their complexity have increased enormously in recent years. This also makes security increasingly complicated. Everyone involved must prioritise building and managing systems securely. “By treating collaboration with other parties as a true partnership, we keep this awareness firmly embedded,” Albert says. “No one has all the expertise needed to oversee every aspect of security in a complex solution. That is why we value working with experts who offer both solicited and unsolicited advice on maintaining and improving security. We see this approach at AMIS | Conclusion, and we are very pleased with it. “We also find that building an ecosystem of partners is highly valuable in safeguarding the reliability and security of our systems. Our collaboration with AMIS | Conclusion contributes to our objectives while also allowing our partners to earn a healthy margin. This approach means you work as one team to improve your solution.”

Albert continues by explaining why security needs to be embedded from the very beginning: “Security by design enables us to offer new services and products on a platform. Without security, our customers lose trust in our organisation. That means security cannot be added afterwards. It must be an integral part of a product’s or service’s design. “Many of our products are commodities. When personalising them, we at Eneco want to be certain that everything works as it should. Delivering high-quality security requires a combination of organisation, processes, technology and the right people. In an optimal environment, all these aspects are in balance. “In our current approach, protecting data is always the starting point. We want customers to trust that the data they share with us will never be used without authorisation. That means protecting it in several ways. Through its security-by-design approach, AMIS | Conclusion provides the confidence we want to give our customers.” “It is reassuring to discuss threats and the reliability of our applications, processes and infrastructure with a capable partner like Conclusion.” Albert Fisch

The approach to security has become much more proactive in recent years. Where antivirus software and a firewall once sufficed, the field has become far more complex. Albert Fisch concludes: “It is reassuring to discuss threats and the reliability of our applications, processes and infrastructure with a capable partner like Conclusion. The aim is to take proactive measures that make our IT landscape more secure. “Today, security focuses much more on detecting anomalies early, preventing further damage and quickly restoring secure services following an incident. That is only possible with a reliable, proactive partner. At Conclusion, we have found a collaboration in which we challenge each other and work towards a shared goal.”