Security

Security for critical infrastructure

Energy sites are critical infrastructure. We designed the platform with that in mind.

Encrypted communication

All traffic between the site, the platform and users runs over TLS 1.3. No unencrypted data exchange.

Access control

Roles and permissions at site and function level. Two-factor authentication for administrator accounts.

Audit trail

Every operator action is recorded — who changed what and when. Full traceability of commands sent to the site.

Network segmentation

Operational network separated from the office network. Outbound-only connections from the site, with no inbound ports required.

Backups

Automatic backups of configuration and historical data, with verified restore procedures.

Compliance

Practices aligned with GDPR and cybersecurity good practice for the energy sector, including NIS2.

Ready to see BESSMAN in action?

Request a demonstration and we will walk you through the platform using data close to your own site.

Get in touch