LibreKAT

Core value: freedom and openness

For LibreKAT, freedom and openness are not a decoration around technology. They are conditions for trust. Those who depend on systems that cannot be studied, questioned or adjusted ultimately have to rely on promises. Open technology makes it possible to verify those promises. Open source is important, but not magical. Open source code does not automatically mean that software is safe, mature or suitable. It does mean that users have rights: view, test, modify, improve and share. That changes the balance of power. An organization does not have to be completely tied to the original supplier if the rate, price or conditions change.

Core value: humanity and respect

There are people behind every system. People who write code, manage systems, investigate reports, make mistakes, implement policies, and experience consequences. Information security without humanity quickly becomes harsh, procedural and blind to the reality in which technology is used. Humanity and respect mean that safety is not organized across people, but with people. Users are not a difficult factor in an otherwise perfect architecture. They are part of the system. A measure that structurally frustrates people, is unclear or is only understood by specialists, leads to detours and a false sense of security.

Core value: integrity and independence

Integrity and independence determine whether research, advice and technology can be reliable. Not because people never have interests, but because those interests must be visible, manageable and subordinate to public values. For LibreKAT this means that choices are testable and are not driven by commercial dependencies that color the outcome in advance. In information security, integrity also has a technical meaning: data and systems must be correct and must not be changed unnoticed. That meaning fits well with the organizational side. Decision-making must also be honest. Anyone who advises a security measure, points out a vulnerability or assesses a dependency must be able to explain the facts, standards and considerations that underlie it.

Core value: just culture

Just culture means that mistakes are opportunities to learn, not automatic reasons to punish. That is not a plea for non-binding. It is actually a way to better organize responsibility. An organization that only looks for guilty parties learns less than an organization that investigates why an error could occur. This is crucial in digital security. Incidents rarely arise from one action by one person. Work pressure, unclear procedures, inadequate tooling, missing training, supplier dependence or poor design often play a role. If the analysis stops at an employee’s last click, the real causes remain.

Core value: knowledge sharing and collaboration

Knowledge is only valuable if it can circulate. Information security is too important to get locked up in separate reports, closed methods or dependencies on a few specialists. LibreKAT therefore sees knowledge sharing and collaboration as the core of digital resilience. Digital infrastructure is a chain. No organization is separate from suppliers, software components, standards, hosting parties, users and regulators. If risks spread through chains, knowledge must be able to do the same. A vulnerability, a migration lesson or a good contract clause becomes more valuable when others can take it further.

Core value: listening and connecting

True collaboration starts with listening. That sounds obvious, but in digital security people often jump to solutions too quickly. There is a scan, a standard, a tool, a dashboard or a contract. These can all be useful. But without a good understanding of context, there is a risk that we provide a technical answer to an administrative, social or legal question. Listening means that users, administrators, directors, lawyers, suppliers and researchers are taken seriously in their own expertise. The user knows where the work gets stuck. The administrator knows the historical choices in the system. The lawyer sees jurisdiction and liability. The driver must weigh risks. The researcher sees patterns. Connecting is bringing that knowledge together.

Core value: reliability and safety

Reliability is safety that lasts in practice. A system can have many security measures and still be unreliable if no one knows how it is set up, if recovery has not been tested or if dependencies only become visible when something goes down. For LibreKAT, reliability and safety are therefore inseparable. Reliable technology is verifiable. This means that operation, configuration, logging, dependencies and changes are transparent. Not every detail needs to be understandable to everyone, but the organization must be able to demonstrate how critical functions are protected and who can intervene and when.

Core value: safety first

Safety first sounds simple, but it is a tough choice. It means that information security is not added at the end of a project nor should it be allowed to disappear behind convenience, speed or marketability. Safety is the starting point for design, implementation and accountability. The wording is deliberately close to aviation. In aviation, safety first is not a poster slogan, but a way of working: standard procedures, checklists, crew resource management, reporting culture, training, incident investigation and the discipline not to normalize unnecessary risk under time pressure. A flight is not safe because nothing went wrong, but because people, processes and technology are arranged so that errors are caught, deviations are reported and lessons return to operations.

Core value: sovereignty and autonomy

Digital sovereignty is about control. Not about doing everything yourself, not about digital self-sufficiency and not about distrust as a basic attitude. The core question is simpler and more administrative: who ultimately has the final say on data, systems, continuity and access? Autonomy is close to this, but is not the same. Autonomy is the ability to act independently. Sovereignty is the power and practical ability to make choices and to enforce those choices. An organization can consciously collaborate and still remain sovereign, as long as it knows what it is handing over, why it is acceptable and how it can act if circumstances change.

Core value: sustainability and continuity

Sustainability and continuity are about the long term. Digital infrastructure must not only work today, but must also be able to be maintained, transferred and continued responsibly. For LibreKAT this is a core value because public digital infrastructure is too important to be dependent on coincidental energy, coincidental people or coincidental financing. Continuity starts with portability. If knowledge only resides with one developer, supplier or volunteer, a project is vulnerable. Documentation, clear governance, version control, release processes and a healthy community are not peripheral issues. They determine whether software can continue to exist when individuals leave.

About our core values

We already defined core values for the LibreKAT Foundation at the start. These are the things that guide our actions and help us maintain direction. We have defined ten: Safety first. For LibreKAT, safety comes first and that is why we promote the ‘safety first’ mentality in information technology. Read more: safety first Freedom and openness. LibreKAT believes in free and open technologies that everyone can study, improve and share. Transparency in source code, decision-making and collaboration is the basis of trust and innovation; Read more: freedom and openness Sovereignty and autonomy. We strive for digital sovereignty: the ability to use, manage and further develop technology without dependence on closed or foreign platforms. LibreKAT supports organizations and communities to maintain control over their digital future; Read more: sovereignty and autonomy Integrity and independence. We act based on public values, not commercial interests. Our choices are verifiable, ethically substantiated and aimed at sustainable digital autonomy for organizations and citizens; Read more: integrity and independence Knowledge sharing and collaboration. Knowledge is only valuable if it is shared. LibreKAT builds bridges between government, business, education and community to grow open knowledge; Read more: knowledge sharing and collaboration Reliability and safety. We promote technology that is reliable, verifiable and secure. This means: careful development, documentation and testing without compromises on security or privacy; Read more: reliability and safety Humanity and respect. There is a human being behind every line of code, system or security measure. We value an inclusive, respectful community in which cooperation, empathy and mutual understanding are central; Read more: humanity and respect Listen and connect. We believe that true collaboration starts with listening to each other, to users and to society. Open dialogue builds understanding, trust and better decision-making within our community; Read more: listen and connect Just culture. Mistakes are opportunities to learn, not to punish. LibreKAT encourages a culture in which people feel safe to report problems, share experiences and improve together with respect for responsibility and growth; Read more: just culture Sustainability and continuity. LibreKAT takes care of the long term: from good software maintenance to sustainable governance and transferable knowledge, so that public digital infrastructure continues to exist even when individuals leave. Read more: sustainability and continuity