Security you can evidence

Security you can evidence

Enterprise customers need more than good intentions. I've been part of GDPR and ISO 27001 accreditation, acting as the technical point of contact for the InfoSec Manager on every engineering question, and taking part in the annual audits. I've also arranged the yearly penetration test, liaising with the testing vendors so the work could be carried out.

• Auditors and the InfoSec Manager had one technical contact for engineering questions.
• Penetration-test findings were fixed in code and tracked to closure.
• Accreditation was kept up year on year through the annual audits, not treated as a one-off.
• Every Mac was held to the same InfoSec and compliance policies through MDM.