Product Security
Product security, vulnerability management, and security advisories for ETC product lines.
Security Policy
Our aim is to deliver a system with an appropriate level of security to the circumstances of the installation. Security is delivered through a combination of product development and system design.
Selected ETC products are certified by the IoXT alliance (https://www.ioxtalliance.org/)
Security Advisories
End of Life Policy
For software-based, IP connected products ETC will provide security and feature updates during the product lifecycle. The lifecycle stage of a product can be determined by its positioning on ETC’s website. When an ETC product reaches its end
of life, the information shall be distributed by press release; and the product details will be moved to the “Legacy Products” section of the ETC website.
End of life indicates that a product is no longer supported with security updates (this may be different to the discontinuation of shipping of a product). ETC will provide at least a 1-year notice for end of life of a product.
Vulnerability Disclosure Program & Response Policy
ETC welcomes submissions of security issues in our products via the form below. Timely identification of security vulnerabilities is critical to eliminating potential threats. We welcome reports from independent researchers, industry organizations,
vendors, customers, and others concerned with product or network security, and we are committed to responsible disclosure.
ETC accepts reports of product vulnerabilities via [this form]. Once a vulnerability is reported, ETC will:
- Confirm receipt of the vulnerability report to the submitter within 3 business days. The submitter will be provided with a point of contact within ETC regarding the report.
- Triage the report. The triage process is carried out by ETCs Product Security Incident Report Team (PSIRT), led by the product manager for the products to which the vulnerability applies
- Verify the vulnerability exists, and assess impact
- If the vulnerability is valid, record the defect as a product issue
- Once the vulnerability is resolved and the resolution is tested, ETC will publish the vulnerability details and resolution within our standard product software release notes
- For OEM products (i.e. products over which ETC does not have complete control of software development), ETC will work with the OEM product vendor to resolve defects and provide feedback.
Vulnerability Disclosure Form
Environmental & Sustainability
Our environmental policies and commitments to responsible manufacturing.
Recycling Guidelines and Initiatives
ETC is committed to fostering a healthy, safe and sustainable global environment, and pledges to help protect and conserve our natural resources through responsible corporate policies and manufacturing processes by:
- reducing waste
- recycling
- engaging in safe and proper management and disposal of hazardous materials
- maximizing the energy efficiencies of machinery, systems, and all facilities
- investing in sustainable technologies
- developing and manufacturing eco-friendly products
- conducting voluntary and ongoing process assessments
- meeting or exceeding compliance with local, national, and international environmental regulations
- encouraging business partners to participate with ETC in these practices
ETC continues to invest in sustainable equipment and technologies, such as returnable shipping containers, reusable storage containers, and high-efficiency HVAC systems with energy management controls.
ETC's environmental statement and the WEEE directive
ETC is committed to preserving the earth's natural environment and contributing to sustainable practices around the world. We are dedicated to recycling all of the products we make, and strive to follow all global requirements including the
European Union's WEEE (Waste from Electrical and Electronic Equipment) directive, which regulates the disposal of electrical equipment. Many countries within the EU and elsewhere in the world have adopted their own regulations similar
to those WEEE dictates, which ETC works to follow.
To further support these initiatives, we encourage our suppliers to comply with the directive as well. Our dealers are encouraged to recycle used ETC equipment brought in by users or direct the products to approved recycling handlers.
ETC and the RoHS 2 directive
In July of 2011 the European Union implemented a ban on new electrical and electronic equipment containing certain environmentally-sensitive materials. This directive – called RoHS 2 (Restriction of Hazardous Substances) – regulates the amount
of cadmium, hexavalent chromium, lead, mercury, polybrominated biphenyl, polybrominated diphenyl ethers, bis (2-Ethylhexl) phthalate, benzyl butyl phthalate, dibutyl phthalate, and diisobutyl phthalate in electrical and electronic equipment,
to prevent them from exceeding limits set forth by the EU.
ETC is dedicated to following the EU RoHS 2 directive, as well as similar legislation in individual countries around the world. Our company strives to keep the regulated substances out of our products, thereby reducing pollution and its environmental
impact, as well as increasing safety when the products reach the end of their life.
ETC and LEED
Initiated in 1998, LEED (Leadership in Energy and Environmental Design) is a certification program that rates the construction and operation of buildings by their use of environmentally-friendly practices. To achieve LEED status, buildings
must be shown to comply with certain criteria, such as energy efficiency.
ETC creates lighting products with sustainability and lower electrical consumption in mind. Buildings that use this more energy-efficient technology can improve their LEED ranking. From daylight harvesting and motion sensors in architectural-lighting
systems, to low-wattage lamps and reduced field-lumen output in Source Four® fixtures, ETC's equipment is among the "greenest" on the market.
For more specific information on ETC Source Four fixture efficiency, visit Great
performances – ETC lighting products.
If you have questions or concerns, please feel free to contact the ETC Environmental Team at ETCEnvironmental@etcconnect.com, or contact Alex Stoltz, Regulatory Management in the
United States, at 1-608-824-5373.