The business activities of Quintessence Consulting nv involve the use of both sensitive business data and personal data of its customers and partners. This data must be protected against various threats and in accordance with internationally accepted standards.
In addition to good technical security, customers and partners expect us to handle their data with care. Quintessence Consulting nv confirms that it deals with data responsibly in its business activities.
At Quintessence Consulting nv we regard the continuity of our services as a top priority. This is reflected in a fully developed management process for business continuity.
Questions about this statement can always be directed to the Data Protection Officer of Quintessence Consulting nv (ict.security@quintessence.be).
At Quintessence Consulting nv we guarantee an adequate level of data security, in accordance with EU Data Protection Directive 95/46 / EC and with Belgian legislation (*). Quintessence Consulting nv is preparing for the provisions of the new European General Data Protection Regulation (GDPR), the successor to the EU Data Protection Directive, which will soon take effect. (*) Two important Belgian laws that apply here are: • "Act establishing and organizing the Crossroads Bank for Social Security" (Law of 15-01-1990) • "Act on the protection of privacy with regard to the processing of personal data" (Act of 8 December 1992)
Personal data and confidential company data are processed in the various business processes. We guarantee the confidentiality, the integrity and the availability of that information at all times. Quintessence Consulting nv maintains a high level of security for the processing and for the data that are processed or stored. Our security is based on internationally accepted standards such as ISO / IEC 27001.
Business Continuity Management (BCM) has been company-wide at Quintessence Consulting nv as part of corporate governance. BCM ensures the correct implementation of the regulation and of the standards and good practices for business continuity, published by national and international organizations such as BSI and ISO. The Quintessence system for business continuity management ensures the continuity of our services if a breakdown occurs as a result of a serious incident or a calamity, such as power outage, fire, inaccessibility of the buildings and incidents with the ICT infrastructure. All crucial activities in the organization are documented and they are regularly tested and optimized in accordance with the continuity strategy.
Our BCM process is based on the British Standard 25999 for business continuity management and the ISO 22301 for Societal Security. Our business continuity strategy addresses the unavailability of buildings, IT and personnel through action plans and the installation of emergency facilities. There are, among other things:
Quintessence Consulting nv has set up a resilient organizational structure to respond appropriately to any type of incident that could threaten the continuity of the organization. The resilience of the organization is based on the operation of various specific teams to ensure continuity: Incident, Crisis, Facility and IT DRP teams. For each of these teams there are up-to-date plans that include incident evaluation procedures, guidelines for escalation, call trees and other business recovery requirements.
There are also instructions for crisis management and crisis communication in such a way that in the event of a serious incident or a calamity, the coordinators and communicators are appropriately coordinated with all stakeholders.
In addition to an annual revision of the plans, as part of the maintenance process, action is taken of continuous sensitization throughout the organization and the embedding of a continuity culture through regular training and exercise. We regard the practice of continuity procedures as a vital element of our BCM process and as an opportunity to discover points for improvement.