LAW AND SECURITY

Article 32 GDPR – Security of processing

Article 32 GDPR requires technical and organisational measures appropriate to the risk. This includes confidentiality, integrity, availability and resilience of systems, the ability to restore availability of data and regular evaluation of security measures.

Official source

Regulation (EU) 2016/679 of the European Parliament and of the Council
27 April 2016
Regulation (EU) 2016/679

EUR-Lex – GDPR →

What does this mean for a business?

SOFBAC InvoiceElectronic invoices contain business data and require controlled, secure processing and reliable document availability.SOFBAC WorkspaceCentral storage and sharing of documents require access control, data availability and appropriate infrastructure protection.SOFBAC RemoteRemote access to business computers should be controlled and protected against unauthorised access.SOFBAC CareMonitoring helps identify availability, resource and device health problems before they cause more serious operational disruption.SOFBAC PassAccess control and secure credential storage help protect business systems against unauthorised access.SOFBAC ImageA complete system image supports recovery of data, applications and configuration after failure, damage or loss of a device.SOFBAC FolderAutomatic backups of important folders support document availability and recovery after failure or data loss.SOFBAC MailBusiness email and PST archives may contain important personal and business data and therefore require protection and recoverability.SOFBAC BildPhoto and project documentation may contain information about people, customers and locations and therefore requires appropriate protection.SOFBAC CCTVCamera recordings may contain personal data. Storage, access and protection should be controlled according to the relevant risk.SOFBAC LagerAn inventory system processes information about goods, users and operations. Availability and integrity of this data are important for business continuity.