02 / Why it matters
Trust starts with the basics.
Whether it concerns customer data, internal processes or a public service: the requirements must be right before anything goes live.
Protecting data
Personal data and business information call for careful access and storage.
Meeting requirements
The GDPR, and for government bodies the BIO (Dutch government information security baseline), set concrete requirements for software and suppliers.
Not becoming dependent
You don't want your organisation to be tied to a single person or supplier.
03 / How we handle it
Built in from the first sketch.
We agree in advance which requirements apply to your organisation, with your security officer or privacy team where needed.
Security and privacy
- security best practices following OWASP;
- roles, permissions and access control;
- logging of important actions;
- careful storage of data;
- a data processing agreement where needed.
Continuity
- code and data that belong to you;
- documentation on delivery;
- knowledge transfer to your own team;
- backups and recovery options;
- agreements on ownership and handover in advance.
04 / Our approach
How we build it in.
Security and privacy are not a separate phase, but part of every project.
- Step 1
Identifying requirements
We discuss which laws, regulations and internal requirements apply.
- Step 2
Recording
We translate the requirements into concrete measures and agreements.
- Step 3
Building and testing
We build the measures in and check them during development.
- Step 4
Handing over
On delivery you receive documentation, so management doesn't depend on us.
05 / Good to know
Questions about security and privacy.
Can't find your question? Feel free to send us a message.
Do you sign a data processing agreement?
Yes, if we process personal data on behalf of your organisation.
Do you contribute to a DPIA?
Yes. If a DPIA is required, we provide the technical information and help think through the measures.
What happens if we stop working with TokoWorks?
We agree on code, ownership and handover in advance. No knowledge stays stuck with us.