Frequently Asked Questions Information Security (22)

How is the software policy regulated?

Modified on Fri, 28 Mar at 10:07 AM
What information security policy applies?

Modified on Fri, 28 Mar at 10:10 AM
Do periodic scans take place? If so, how often?

Modified on Thu, 3 Apr at 3:19 PM
Does the backup include draft datasets?

Modified on Fri, 28 Mar at 10:48 AM
Is there a separation of development, test and production servers, and if so, how is this designed?

Modified on Fri, 28 Mar at 10:54 AM
Who is responsible for the personal data in the datasets?

Modified on Fri, 28 Mar at 11:28 AM
Is there such logging that in the event of a (suspected) data breach or other type of security incident, analyses can be made, such as who accessed, modified or deleted which data, which data was affected, et cetera?

Modified on Fri, 28 Mar at 11:34 AM
How are the log files protected and are they in a different location from the systems themselves?

Modified on Fri, 28 Mar at 11:38 AM
Can an institute, as part of an audit or following an incident, access the relevant part of the log file?

Modified on Fri, 28 Mar at 11:40 AM
Can complete deletion of a dataset be done only at the request of the institute or depositor?

Modified on Fri, 28 Mar at 11:43 AM