Security and IT Requirements
How the OPTOVERA Device and cloud platform are secured: network access, data protection, PIN and iris data, and shared responsibilities with the Customer.
- What network access does the OPTOVERA Device require?
- Can the Device be placed on a guest network, dedicated wireless network, or isolated network segment?
- Does the OPTOVERA Device connect to customer internal systems or industrial control systems?
- What connectivity options are supported?
- Can the Device operate if the network is temporarily unavailable?
- How is communication between the Device and the cloud protected?
- How does OPTOVERA reduce the risk of man-in-the-middle attacks?
- How are OPTOVERA Devices authenticated and managed?
- What restrictions are applied to the Device?
- How are software updates and security patches delivered?
- How is the Device hardened against attacks?
- How is the Device protected against physical tampering or unauthorized access?
- Does the Device include a physical tamper sensor?
- How is data stored on the Device protected?
- How is data stored in the OPTOVERA cloud platform protected?
- How is access to the OPTOVERA platform controlled?
- Who can access sensitive OPTOVERA data?
- How long is customer data retained?
- How can a customer request deletion of data?
- How are security events logged and retained?
- What cybersecurity certifications or standards apply to OPTOVERA?
- Can SOBEREYE provide compliance evidence?
- Has OPTOVERA been certified for cold-chain, energy-management, or industrial environmental monitoring standards?
- How does SOBEREYE manage vulnerabilities?
- How are customers notified about vulnerabilities or security patches?
- What happens if there is a cybersecurity incident?
- How quickly are customers notified of a security incident?
- Does SOBEREYE monitor the Device and cloud environment for security-relevant conditions?
- Does SOBEREYE require remote access to the customer’s internal network?
- What are the customer’s security responsibilities?
- How are PINs stored and protected?
- Why is there no lockout after failed PIN attempts?
- How do PIN changes and resets reach an offline Device?
- How is iris data protected, and what happens when a User chooses PIN?
- Network access required for OPTOVERA Devices
- How OPTOVERA protects the managed testing Device
- Data protection, access control, and retention
- Security updates, monitoring, and incident response
- What customers should prepare before deployment
- Association methods and PIN security at a glance