Cybersecurity
Cybersecurity built in, not bolted on
Security is an integral part of product quality: data protection, system robustness, regulatory compliance and user trust.
Our principle is simple: anticipate risks, build security in from the design stage and maintain it over time. An approach now structured by our ISO 27001 certification, which provides a clear framework for our projects and for our clients.
Information security, a company commitment
Our information security policy
SDATAWAY is committed to protecting the information entrusted to it and to ensuring the confidentiality, integrity and availability of information and systems, as well as the traceability of actions affecting information systems and critical information assets.
Our Information Security Management System is based on a risk-based approach and takes into account the applicable legal, regulatory and contractual requirements.
Through our information security policy, we commit in particular to:
- protect the confidentiality, integrity and availability of information and systems
- ensure the traceability of actions affecting information systems and critical information assets
- give our clients and partners assurance that information security is appropriately managed
- reduce the likelihood and impact of security incidents
- continually maintain and improve our Information Security Management System (ISMS)
Management supports this approach and provides the resources needed for its operation and continual improvement.
Our 4-step approach
Anticipate risks
Identify from the outset the assets to protect, the threat scenarios and the regulatory constraints, so that security is sized proportionately.
Design securely
Build security into the architecture (hardware, firmware, software, cloud), technology choices and access and update mechanisms — at the same time as the function.
Verify & validate
Security reviews, static and dynamic testing, targeted validation of critical points: detect flaws early, before any deployment.
Maintain and improve
Monitoring, vulnerability management, patches and tracking of residual risks: a secure product is a maintained product.
Frameworks, standards & practices
Recognised reference frameworks and built-in practices that ensure consistency, traceability and continuous improvement.
ISO/IEC 27001 & 27002
Our Information Security Management System is certified to ISO/IEC 27001:2022. The best practices of ISO/IEC 27002 complete our framework of security controls.
CRA & RED compliance
Radio and security requirements are taken into account, in cooperation with specialised laboratories and partners.
What it brings you
We systematically adapt the level of security to the type of product, the risk, the regulatory context and your capabilities: we avoid unnecessary over-securing, without ever underestimating risks.
Our ISO/IEC 27001:2022 certification attests to the implementation of a structured information security management system, based on risk management and continual improvement.
For you, this means a more reliable partner, better risk management, easier audits and compliance, and more robust, longer-lasting products.
Report a vulnerability or security weakness
Have you identified a vulnerability or security weakness affecting an SDATAWAY system, service or product? Please report it to us responsibly so that we can analyse and address it.