Security
Keeping secure what keeps your business running.
More software is entering your company, from more makers, and increasingly with AI agents that can reach your data and systems. Keeping it secure is then no longer a project but a property of everything that runs. That is why everything we make is secure by design, and why the roadmap records who maintains what and what software and agents may see and do.
When the question comes up
It usually starts here.
- 01NIS2 or the Cyber Resilience Act applies or is about to, and nobody oversees what that means in practice.
- 02A major customer sets requirements in a tender, audit or supplier assessment.
- 03AI agents are arriving with access to company data and systems, and nobody has defined what they may see and do.
- 04Software from different makers is linked together, to the shop floor and to the internet, without anyone overseeing the whole.
- 05An incident or a near miss has shown how vulnerable the operation is.
What we do
Three places where we keep it secure.
In what we make
Access, network, updates and logging are part of the design of apps, integrations and AI agents, not a layer added later. For agents it is defined up front which data they see, what they may do and where that data stays.
In the roadmap
What is running, who maintains it, what depends on what and what really matters for continuity? That is in the IT roadmap, with owners and a rhythm, so that keeping it secure does not depend on one person or one supplier.
In the reporting to the board
A state of affairs that board and supervisors can judge: what is the risk, what are we doing about it and what do we consciously accept. No jargon and no checklists.
How we approach it
Not a paper exercise.
We work along the lines of ISO 27001 for the organisation and IEC 62443 for the shop floor, on board and in the warehouse. Not as a goal in itself, but as a way of working: first know what is there and what really matters, then measures that do not get in the way of the operation.
Because we make control systems and platforms and host applications ourselves, we know where the real vulnerabilities are, and what a stoppage costs. So we choose measures that respect the operation.
Security is not a separate service with us. It is in how we make and in what the roadmap records, so that it carries on once we are gone.
Contact