Versinetic, a supplier of white-label hardware, software, and load-balancing systems to EV charging providers, has launched a new tool designed to help charge point operators (CPOs), local authorities and manufacturers evaluate cybersecurity risks across cloud-connected charging infrastructure.
“As EV charging networks continue to scale across the UK and Europe, organizations are increasingly required to assess not only charging hardware, but also the security of the cloud platforms, customer data environments and operational systems that support them,” the company says.
Versinetic’s new EV Charger Cloud Security Assessment Tool supports a self-assessment covering 24 checkpoints across four areas:
- Regulatory & Legal Compliance
- Architecture
- Operations
- Process & Governance
The assessment is designed to uncover common weaknesses within cloud-connected charging environments, including inadequate separation of customer and operational data, poorly controlled remote access pathways, gaps in certificate management processes and shortcomings in incident response preparedness.
The assessment is also designed to help organizations review their readiness for evolving security requirements, including the transition towards TLS 1.3 and future ISO 15118-20 ecosystems, which will place greater emphasis on certificate management and authenticated communications.
Available free of charge, the assessment can be used by operators, manufacturers and local authorities as part of supplier evaluations, procurement exercises and internal security reviews.
“Many procurement teams know how to compare charging hardware, but have less visibility into the cloud platforms that manage customer data, operational systems and remote access,” said Dunstan Power, Managing Director at Versinetic. “Procurement teams have become very good at comparing charging speeds, hardware specifications and commercial models. What is often less clear is how to assess the security of the cloud platforms sitting behind those networks.”
“Questions around data segregation, access controls, certificate management and incident response are becoming increasingly important, yet they don’t always form part of the procurement conversation. We developed this assessment to help organizations ask those questions earlier and more consistently.”
Source: Versinetic
from Charged EVs https://ift.tt/1YZwFRI
No comments:
Post a Comment