Security
Security principles
Protecting people, places, things, and data is at the core of everything Ericsson builds—from wireless edge endpoints to the NetCloud platform that drives them. Just as customers use actionable security information through the Ericsson NetCloud platform to make informed network-security decisions, Ericsson has foundational processes and strategies in place to ensure everything we do is secure.
Enterprise Wireless strives to adhere to security best practices, including:
- Secure coding: Code is continuously checked against evolving attack patterns.
- Incident response: Defined processes support timely response and customer transparency.
- Security architecture and design review: Security is built into product design.
- Vulnerability management: Vulnerabilities are identified, prioritized, remediated, and tracked.
- Security testing and validation: Products are tested using appropriate security techniques.
- Identity and access management: Access is controlled through authentication, authorization, and least privilege.
- Data protection and privacy: Customer and user data is protected with appropriate controls.
- Compliance and assurance: Products and processes align with applicable requirements and standards.
- AI security: AI use considers security, privacy, transparency, and governance.
Addressing security vulnerabilities
Ericsson recognizes the importance of security and privacy and takes security issues seriously. Ericsson is committed to communicating and working in a timely manner on any reported security vulnerability, whether reported by an employee, customer, partner, or other outside party.
Ericsson follows a responsible disclosure process and asks vulnerability submitters to do the same. Impacted customers and partners will be privately notified before public disclosure to minimize the risk of exploitation.
Vulnerability alerts by product
Security incidents
Ericsson understands the importance of effective incident response to its customers. Ericsson Enterprise Wireless Solutions has developed and implemented formal incident-response processes to support a consistent, coordinated, and timely approach when security incidents occur.