FIN Framework
At J2 Innovations, we have taken the next step in providing best-in-class cybersecurity with the release of the latest FIN Framework.
We’ve adopted and continue a “think security” philosophy in developing and advancing our FIN Framework product.
Cyberspace is a complex system of interaction between people, software, and services that are facilitated by using technical means to connect them to the Intranet and Internet. By taking a holistic approach to security, we focus on four key factors that impact security strength: people, communication, processes, and technology.
The spectrum of security challenges is broad. While physical threats are more obvious and change less often, cyber challenges can be more nefarious due to an ever-changing threat landscape. When it comes to aligning security with business needs and the inevitable move toward convenience, we put a focus on cybersecurity from the outset.
Security by Design Expertise
The effectiveness of a product’s cybersecurity design is attributed to the expertise of the development team. As part of our Security by Design methodology, we invest in technology developments for digital protection and product security and training required to maintain high levels of employee cybersecurity expertise.
Throughout the lifecycle of the product, our experts perform security threat and risk assessments (called TRAs) to address expected risks in the intended application of use. This assessment starts at the beginning of the process and is repeated as required to identify and mitigate risks appropriately.
In addition, Siemens AG and external experts conduct regular product security testing and use both manual penetration tests and automated machine security testing. The idea is to break the system in order to secure it. This testing ensures that the FIN Framework meets our security requirements. The test results are recorded and used to identify any necessary corrective actions.
Applying Security by Design
to FIN Framework
FIN Framework is an open and robust platform for building automation and IoT that is at the center of creating efficient, sustainable and comfortable environments. FIN Framework products are aligned with ISO/ IEC62443.
- End-to-end encryption from client to server
- End-to-end encryption between servers
- Encrypted communication to other devices
- Asymmetric Key Certificate-Based Encryption
- SLDAP Authentication
- Using the least privilege principle to limit data and application access
- Support of hardware and software firewalls
- SCRAM-SHA-256 authentication
- Sensitive Information is stored in an encrypted database
- Role-based authorization
- Action-based auditing
- Configurable password complexity enforcement
- Use of verified third-party components
