Wiesbaden, February 2020: Futura Solutions has started the new year with the first follow-up audit after re-certification by TÜV Saarland in 2019. In addition to the monitoring of the Information Security Management System (ISMS), the audit also focused on close intersections with new approaches in IT organization, which Futura Solutions will specifically pursue in 2020. The so-called DevOps method, which aims at stronger cooperation and integration between software development and IT operation, will play a major role.
Information security requires a comprehensive approach. For Futura Solutions, a provider of cloud-based solutions and IT service provider, the topic of responsibility for information security plays a major role. The conscious decision to have the entire company, including the organization, i.e. all applications and processes required for the development and operation of the cloud solution FUTURA, undergo ISO certification is an important step in this direction. The annual audits for ISO/IEC 27001 certification have the task of monitoring further developments around the core of the information security management system (ISMS).
Information security perspective
“IT security is only one aspect of cloud computing. The impulses that result in a closer interlinking of the development and IT operations team – and thus the use of new platforms and technical processes in our IT organization are equally important”, emphasizes Hartmut Schwadtke (2nd from right in the photo), Managing Director of Futura Solutions. In the future, so-called DevOps will bring the development and IT operations teams closer together. DevOps is an artificial word made up of “Dev”, which represents the software developers, and “Ops”, which stands for IT operations.
“The DevOps approach helps to ensure a sustained high level of software quality, a fast and regular development of new releases as well as an optimal cooperation between all project participants”, confirms Markus Frank (2. from the left in the picture), Head of IT Infrastructure Cloud since August 2019 and responsible for the transformation program. “We are in the process of creating the technical foundations for this. And, of course, it is also a matter of following the ISO principle here, for example in establishing the associated additional control measures such as security and functional validation of program code, access protection, guidelines or training.
High level of security and risk management
“It has to be acknowledged that Futura Solutions has maintained a consistently high level of quality over a wide area since the initial certification”, confirms Holger Bohne, main auditor for TÜV Saarland. “In view of a threat situation in which IT service providers are increasingly becoming the victim of targeted attacks in order to hit companies, this is particularly noteworthy”.
Consultants of DEUDAT GmbH, external data protection officer of Futura Solutions, also accompany the regular internal audits. The first certification took place in 2015, the second monitoring audit will take place in one year; the next recertification is scheduled for 2021.
About Futura Solutions
Since 1997, Futura Solutions has been developing and operating innovative software solutions that connect people and their work flows. The workflow expert combines experience in developing cloud services and their secure operation with a broad SAP expertise. Over 60,000 users worldwide and across all industries are working with FUTURA® applications. In addition to medium-sized companies, its customers include 20 percent of the DAX30 companies, for which Futura Solutions has opened up new operational potentials in their procurement processes.
Sabine Avella Salazar
phone: +49 611 33 460 430