Security
How NFE keeps its people, systems, customers and data safe: incident response, team security, policies and incident reports.
Security at NFE
Security at NFE This book is adapted from the Security section of the GitLab Handbook (CC BY-SA ...
Incident Response
How to report a security incident, how we classify severity, and how we respond. Adapted from Git...
Reporting a Security Incident
Reporting a Security Incident Adapted from GitLab's "Engaging the Security Engineer On-Call". If ...
Security Incident Severity Matrix
Security Incident Severity Matrix Adapted from GitLab's Security Incident Severity Matrix. Purpos...
Security Incident Response Guide
Security Incident Response Guide Adapted from GitLab's Security Incident Response Guide (SIRT). S...
Leaked Credentials Runbook
Leaked Credentials Runbook Use this when an NFE password, app password, API key or SSH key may be...
Responding to Ransomware
Responding to Ransomware Adapted from GitLab's "Responding to Ransomware". Ransomware encrypts fi...
Team Member Security
What every NFE team member does to keep accounts, email and devices safe. Adapted from GitLab's C...
Password Guidelines
Password Guidelines Adapted from GitLab's Password Guidelines, which follow NIST SP 800-63B. Pass...
Accounts, 2FA and App Passwords
Accounts, 2FA and App Passwords Adapted from GitLab's identity and access guidance, for NFE's Nex...
Email Security and Phishing
Email Security and Phishing Adapted from GitLab's Phishing Program and Email Security Standards. ...
Device and Network Security
Device and Network Security Adapted from GitLab's device standards and "Isolating your work lapto...
Onboarding and Offboarding Access
Onboarding and Offboarding Access Adapted from GitLab's CorpSec Onboarding/Offboarding Services. ...
Policies and Standards
Access management, audit logging, encryption, and transparency. Adapted from GitLab's Security an...
Access Management Policy
Access Management Policy Adapted from GitLab's Access Management Policy. Purpose and scope Make s...
Audit Logging Policy
Audit Logging Policy Adapted from GitLab's Audit Logging Policy. Why We can only investigate what...
Encryption Standard
Encryption Standard Adapted from GitLab's Encryption Policy. In transit Every NFE web service (N...
Transparency by Default
Transparency by Default Adapted from GitLab's "Transparency by Default" for Security. Openness is...
Incident Reports
Write-ups of past security incidents: what happened, root cause, and what we changed. Internal only.
Product Security
Securing what NFE builds and deploys in the field: meters, inverters, OpenEMS/Raspberry Pi edge d...