Security above all

We continuously improve our high level of security through organisational and technical measures as well as the constant review of infrastructure, processes, products and employees from an information security perspective. We prove this with several certifications and attestations:

• ISO 27001 for information security management systems for the complete business unit |”KISTERScloud Services“ (all aspects of KISTERScloud Services, from the technical infrastructure, through the operational processes to the employees) and for the software development and support of the Energy, HydroMet (formerly Water and Monitoring), EHS and IT Viewer business units.
• SOC 2 Type 2 and BSI C5 Type 2 for the entire ‘KISTERScloud Services’ business unit
• BSI TR-03109-6 for the SaaS solution for smart meter gateway administration. This allows an official use of the system for measuring point operators.
• TÜV TSI certification for the KISTERS Data Center located in our main headquarters in Aachen, Germany

In our state-of-the-art certified data center in Aachen, Germany, we operate both our own IT and the SaaS solutions for our customers. Maximum security is required here. To keep your information secure and accessible, we implement a comprehensive security policy that includes:

• Physical security in the KISTERS Data Center
• Secure, high-performance access via the internet
• Modern storage and high availability concept

When developing our software solutions, we work according to our Secure Software Development Lifecycle (S-SDLC) and relevant best practices (BSI, NIST, OWASP, etc.). This means that we consider the security of a product from conception to delivery and maintenance.

We avoid typical security gaps during coding, carry out code reviews with a security focus and also test our software under stress conditions, including penetration tests. In this way, we ensure that you receive secure software solutions.

As an IT service provider, KISTERS operates and manages the KISTERScloud solutions both in its own certified KISTERS data centre and in public clouds (AWS, Azure) and takes responsibility for the IT infrastructure: our experts take particular care of security aspects, system maintenance and servicing as well as updates (software and hardware) to always keep the services up to date. The entire ‘KISTERScloud Services’ division is SOC 2 Type 2 and BSI C5 Type 2 tested.

Your benefits with KISTERScloud:

• More time to focus on your core business processes
• State-of-the-art high-availability systems at manageable costs
• No expensive infrastructure and skilled personnel required to administer and update the software
• No time spent on administration of your IT infrastructure
• Quick access over the Internet
• Efficient IT support for your business processes

Our support for the Energy, HydroMet, EHS and IT Viewer business units is compliant with the ISO/IEC 27001 standard. Our employees receive regular training and we use secure customer service desks for your support enquiries.

The Chief Information Security Officer (CISO) and his team are responsible for coordinating the implementation, continuous improvement and documentation of all information security, business continuity management and data protection measures. Our CISO team works closely with those responsible for the KISTERS infrastructure and product development – with the aim of offering you, our customers and partners, the highest possible level of security.