{"id":71132,"date":"2018-10-01T12:37:50","date_gmt":"2018-10-01T10:37:50","guid":{"rendered":"https:\/\/tcm.be\/tcm-succeeds-intrusion-tests-and-is-gdpr-compliant\/"},"modified":"2025-11-26T19:57:30","modified_gmt":"2025-11-26T18:57:30","slug":"tcm-succeeds-intrusion-tests-and-is-gdpr-compliant","status":"publish","type":"post","link":"https:\/\/tcm.be\/en\/tcm-succeeds-intrusion-tests-and-is-gdpr-compliant\/","title":{"rendered":"TCM succeeds intrusion tests and is GDPR compliant"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"alignleft size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1603\" height=\"779\" src=\"\/wp-content\/uploads\/Privacy-compliant2.jpg\" alt=\"GDPR compliant testing\" class=\"wp-image-10093\" title=\"\" srcset=\"https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2.jpg 1603w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-900x437.jpg 900w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-768x373.jpg 768w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1536x746.jpg 1536w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-480x233.jpg 480w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-640x311.jpg 640w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-720x350.jpg 720w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-960x467.jpg 960w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1168x568.jpg 1168w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1440x700.jpg 1440w\" sizes=\"auto, (max-width: 1603px) 100vw, 1603px\" \/><\/figure>\n<\/div>\n\n\n<p>The General Data Protection Regulation (GDPR) is applicable since 25 May 2018. The purpose of this regulation is to protect the privacy of European citizens. One of the important aspects is on the technical side where records must be securely handled and stored so only people that need access to such data can get at it. TCM uses secured<a href=\"https:\/\/tcm.be\/en\/services\/data-processing\/\">systems<\/a>and<a href=\"https:\/\/tcm.be\/en\/online-clients-access\/\">methods<\/a>for managing debt collection claims.<strong>\u2018Cloud Computing\u2019<\/strong>TCM shifted form own in-house servers to cloud computing in 2014. Data is now stored in an<strong>AW<\/strong><strong>S (Amazon Web Services)<\/strong>data bank. One of the great advantages of this solution is its accessibility from any connected device, from anywhere in the world at any time. Another improvement is security as AWS provides much better security as compared to what we could manage with our in-house system.<strong>Intrusion tests<\/strong>Naturally, design is paramount and we needed to check that our solutions are hacker proof. We asked the<strong>computer firm<\/strong><strong><a href=\"https:\/\/www.easi.net\/\" target=\"_blank\" rel=\"noopener\">EASI<\/a><\/strong>to undergo penetration testing. They have a dedicated team for such \u2018ethical hacking\u2019.\u00a0 They attempt in different ways to pass through the closed doors. The \u2018ethical hackers\u2019 were provided with IP addresses and went to work between 7 and 11 July 2018. All our data banks (production, copy, replica) were tested.<strong>What tests?<\/strong>They performed:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Vulnerability Scan<\/li>\n\n\n<li>Infrastructure intrusion tests &amp; validation of found vulnerabilities<\/li>\n\n\n<li>Website\/Web Application testing (SQL Injection, Fuzzing\u2026)<\/li>\n\n\n<li>Report with recommendations<\/li>\n\n\n<li>Report presentation and debriefing<\/li>\n\n<\/ul>\n\n\n\n<p><strong>Results<\/strong>Based on the tests performed, EASI delivered a certificate on 21st August 2018. Our system passed the tests comfortably. It has not been possible for the \u2018ethical hackers\u2019 to get into our system and no personal data (or other data) could be accessed. Our system can be considered as secure and well protected against hackers. Hence we can confirm to our clients that any confidential data is treated as such and stored in a technically safe way. TCM uses tools and processes that are GDPR compliant and protects citizens\u2019 data. \u00a0 Please<a href=\"https:\/\/tcm.be\/en\/contact\/\">contact us<\/a>for any question. We are here to assist you.<\/p>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignleft size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1603\" height=\"779\" src=\"\/wp-content\/uploads\/Privacy-compliant2.jpg\" alt=\"GDPR compliant testing\" class=\"wp-image-10093\" title=\"\" srcset=\"https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2.jpg 1603w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-900x437.jpg 900w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-768x373.jpg 768w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1536x746.jpg 1536w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-480x233.jpg 480w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-640x311.jpg 640w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-720x350.jpg 720w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-960x467.jpg 960w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1168x568.jpg 1168w, https:\/\/tcm.be\/wp-content\/uploads\/Privacy-compliant2-1440x700.jpg 1440w\" sizes=\"auto, (max-width: 1603px) 100vw, 1603px\" \/><\/figure>\n<\/div>\n\n\n<p>The General Data Protection Regulation (GDPR) is applicable since 25 May 2018. The purpose of this regulation is to protect the privacy of European citizens. One of the important aspects is on the technical side where records must be securely handled and stored so only people that need access to such data can get at it. TCM uses secured<a href=\"https:\/\/tcm.be\/en\/services\/data-processing\/\">systems<\/a>and<a href=\"https:\/\/tcm.be\/en\/online-clients-access\/\">methods<\/a>for managing debt collection claims.<strong>\u2018Cloud Computing\u2019<\/strong>TCM shifted form own in-house servers to cloud computing in 2014. Data is now stored in an<strong>AW<\/strong><strong>S (Amazon Web Services)<\/strong>data bank. One of the great advantages of this solution is its accessibility from any connected device, from anywhere in the world at any time. Another improvement is security as AWS provides much better security as compared to what we could manage with our in-house system.<strong>Intrusion tests<\/strong>Naturally, design is paramount and we needed to check that our solutions are hacker proof. We asked the<strong>computer firm<\/strong><strong><a href=\"https:\/\/www.easi.net\/\" target=\"_blank\" rel=\"noopener\">EASI<\/a><\/strong>to undergo penetration testing. They have a dedicated team for such \u2018ethical hacking\u2019.\u00a0 They attempt in different ways to pass through the closed doors. The \u2018ethical hackers\u2019 were provided with IP addresses and went to work between 7 and 11 July 2018. All our data banks (production, copy, replica) were tested.<strong>What tests?<\/strong>They performed:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Vulnerability Scan<\/li>\n\n\n<li>Infrastructure intrusion tests &amp; validation of found vulnerabilities<\/li>\n\n\n<li>Website\/Web Application testing (SQL Injection, Fuzzing\u2026)<\/li>\n\n\n<li>Report with recommendations<\/li>\n\n\n<li>Report presentation and debriefing<\/li>\n\n<\/ul>\n\n\n\n<p><strong>Results<\/strong>Based on the tests performed, EASI delivered a certificate on 21st August 2018. Our system passed the tests comfortably. It has not been possible for the \u2018ethical hackers\u2019 to get into our system and no personal data (or other data) could be accessed. Our system can be considered as secure and well protected against hackers. Hence we can confirm to our clients that any confidential data is treated as such and stored in a technically safe way. TCM uses tools and processes that are GDPR compliant and protects citizens\u2019 data. \u00a0 Please<a href=\"https:\/\/tcm.be\/en\/contact\/\">contact us<\/a>for any question. We are here to assist you.<\/p>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n","protected":false},"excerpt":{"rendered":"<p>The General Data Protection Regulation (GDPR) is applicable since 25 May 2018. The purpose of this regulation is to protect the privacy of European citizens. One of the important aspects is on the technical side where records must be securely handled and stored so only people that need access to such data can get at [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":10093,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[63],"tags":[],"class_list":["post-71132","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/posts\/71132","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/comments?post=71132"}],"version-history":[{"count":1,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/posts\/71132\/revisions"}],"predecessor-version":[{"id":72179,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/posts\/71132\/revisions\/72179"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/media\/10093"}],"wp:attachment":[{"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/media?parent=71132"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/categories?post=71132"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tcm.be\/en\/wp-json\/wp\/v2\/tags?post=71132"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}