Royal FloraHolland (RFH) recently commissioned an independent IT audit into the protection of strictly confidential data within its Floriday platform. The audit shows that RFH has effective measures in place to ensure the confidentiality of sensitive information and meet the highest standards of data security.
Information policy and data committee
RFH wants data on Floriday to be handled with integrity, both for growers and buyers. We underpin this in our information policy. The data committee, which was established to discuss and evaluate Royal FloraHolland's information policy, has commissioned its fifth audit.
Remco Wilting, responsible for RFH's data policy, said, "Data security is the basis of trust in our digital marketplace. Growers and buyers must be confident that their commercial information will not fall into the wrong hands. This is why we have strict rules and transparent processes: sensitive data is only shared with parties who have a right to it, and is never traceable to individual companies. This is how we create a safe environment in which everyone can act with confidence."
Key findings
Key findings from the audit:
- Strictly confidential data, such as contract data, standing orders, sticker prices, end-customer data and Messenger messages, are carefully protected within Floriday.
- Access to this data is strictly regulated. Only authorised staff have access so that they are able to provide support.
- Connections to other systems (such as software packages, data warehouses and RFH's financial system) are set up so that strictly confidential data is not shared.
- Reports to third parties comply with the non-traceability requirement: data is aggregated in such a way that it cannot be traced back to individual companies or persons, and only authorised employees have access to it.
Thijs van den Broek (Data Lead at Dutch Flower Group): "The audit shows that Floriday effectively safeguards the confidentiality and non-traceability of strictly confidential data, such as contracts, end-customer information. As the data committee, we continue to think about further improvements and ensure that recommendations from the audit are followed up."
Recommendations
The audit includes some recommendations to further optimise internal control and documentation. RFH takes this advice to heart and continues to invest in data protection to ensure a reliable digital platform.
What can you do yourself when it comes to processing data securely?
More and more colleagues are working together in Floriday to optimise the sale and purchase of flowers and plants. Having multiple accounts for an organisation can also pose risks. Twice a year, we ask the administrators (main users) on Floriday to check the roles and permissions for all colleagues who have access to Floriday. Please also check regularly that all colleagues still have the correct roles and permissions in the platform. See how to do this in the Floriday Helpcenter.