Security

Core value: reliability and safety

Reliability is safety that lasts in practice. A system can have many security measures and still be unreliable if no one knows how it is set up, if recovery has not been tested or if dependencies only become visible when something goes down. For LibreKAT, reliability and safety are therefore inseparable. Reliable technology is verifiable. This means that operation, configuration, logging, dependencies and changes are transparent. Not every detail needs to be understandable to everyone, but the organization must be able to demonstrate how critical functions are protected and who can intervene and when.

Read more

Core value: safety first

Safety first sounds simple, but it is a tough choice. It means that information security is not added at the end of a project nor should it be allowed to disappear behind convenience, speed or marketability. Safety is the starting point for design, implementation and accountability. The wording is deliberately close to aviation. In aviation, safety first is not a poster slogan, but a way of working: standard procedures, checklists, crew resource management, reporting culture, training, incident investigation and the discipline not to normalize unnecessary risk under time pressure. A flight is not safe because nothing went wrong, but because people, processes and technology are arranged so that errors are caught, deviations are reported and lessons return to operations.

Read more