An outage is not an option. The architecture spans two sites and the drill is on the calendar.
Turkish Law 5651 requires mass-use providers to retain access records for two years. Log retention periods →
If a threat that enters the corporate network can reach the field control network, the risk moves from the office to the field.
The field control network is physically separated from the corporate one.
See the approach →If the recovery facility is in the same city as the main site, a regional disaster hits both at once.
As an audit approaches, gathering records, documents and evidence turns into a project of its own.
The infrastructure side of a regulatory audit is ready before the audit starts.
See the approach →The field control network is physically separated from the corporate one.
Energy is one of the fifteen critical infrastructure sectors the law lists. If you are in scope, the obligations to provide logs and to report vulnerabilities and incidents are already in force.
Each drill is documented with its date, measured time and findings; that record is the evidence an audit asks for.
Eclit is certified to ISO 22301 for business continuity management.
Ask our team directly.
0850 432 3258No. The two networks are physically separate, and we work out with you how the separation applies to your site.
It is in another city. The distance between the two sites is deliberate, so the same disaster cannot affect both.
Drills are on the calendar, and we set their frequency with you based on your organization's obligations.
The retention period is set per record type and by the regulations that bind you, and records are kept unalterable for that period.
Tell us how things are set up today and we will work out where to start.
Get in touch
