Safety, trust and how we brew it.

With (an) IPA, of course 😉

We recently had a presentation from IPA, an organisation specialising in information security. IPA helps companies understand what measures are needed to keep information secure and how employees can be made aware of risks and best practices. At Cube, we regularly hold training sessions and events to improve our employees' knowledge. Not just for specialists, but for everyone. This way, the entire organisation knows what we are talking about when we discuss information security, from marketing to purchasing and from management to design.

Bob ten Vergert - Security officer bij Cube - Oldenzaal

Bob Test Engineer | Security & Privacy

Informatiebeveiliging: Veiligheid, vertrouwen en hoe we dat brouwen.

Awareness as one of the most important pillars.

Everyone must be aware of terms, common mistakes, policies and measures, so that together we can comply with the requirements of ISO27001 and NEN7510. Without practical knowledge or insight into the limits, mistakes can easily be made. Awareness is therefore one of the most important pillars for organisations that take security seriously: repeat, train and continue to provide refresher courses.

Information security at Cube.

Upon joining the company, we test all employees on various technological and privacy-related topics. In addition, we attend professional security training courses several times a year, which is part of our information security management system. Reflection and improvement are crucial. Important pillars of the certifications are therefore training, awareness and knowledge development.

Knowledge = information security.

Information security also requires knowledge. A developer can install the most advanced firewall on servers and applications, but if an intern automatically gains access with their new work email, it will all have been for nothing. Simply put: cybersecurity protects against attackers, information security protects against people. Poor information security is more often due to ignorance or inattention than to an actual hack.

Safety as a team.

The main takeaway? Keep training and keep awareness up to date. Technological solutions are important, but even the best systems are vulnerable if people do not understand the rules or are not alert. By continuously practising, sharing knowledge and raising awareness, you ensure that everyone within the organisation knows what to do and what to avoid. This way, security becomes not just a matter of technology, but of a team that is jointly responsible and makes conscious choices. Only then will confidence in your processes and systems remain strong.