[et_pb_section fb_built=”1″ fullwidth=”on” _builder_version=”4.4.1″][et_pb_fullwidth_post_title categories=”off” comments=”off” featured_placement=”background” _builder_version=”4.4.6″ title_font=”Roboto||||||||” title_text_color=”#ff6317″ title_font_size=”50px” meta_font=”|300|||||||” meta_text_color=”#000000″ meta_font_size=”16px” background_enable_color=”off” use_background_color_gradient=”on” background_color_gradient_start=”rgba(248,248,248,0.8)” background_color_gradient_end=”rgba(248,248,248,0.5)” background_color_gradient_overlays_image=”on” height=”400px” global_module=”403″ locked=”off”][\/et_pb_fullwidth_post_title][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.4.1″ custom_padding=”|||0px||” locked=”off”][et_pb_row use_custom_gutter=”on” _builder_version=”4.4.4″ custom_margin=”||||false|false” custom_padding=”50px|20%|||false|false” border_color_left=”rgba(0,0,0,0)”][et_pb_column type=”4_4″ _builder_version=”4.4.1″][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n
Remote work has been around for a long while, steadily crawling up people\u2019s attention. But the recent months have brought it to a peak, with a 130% increase in interest between end-February and mid-March 2020. Some have been praising it for a while (e.g. Jason Fried and David Heinemeier Hansson -creators of Ruby on Rails, Basecamp, Hey- wrote a #1 bestseller book about it<\/a>, in 2013!); others see it as blowing-up the very base of technological innovation (see John Hagel\u2019s How Remote Work Could Destroy Silicon Valley<\/em><\/a>).<\/p>\n At Berg Software, we take a rather pragmatic approach on remote work. We\u2019ve \u201cbeen there, done that\u201d since mid-1990s, as quality providers of outsourced, custom-made software:<\/p>\n Remote work comes with a huge range of topics to be discussed. We think we\u2019re mostly qualified to talk about your benefits and the security-related challenges, so let\u2019s keep it focused:<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=”on” gutter_width=”3″ _builder_version=”4.4.1″ custom_margin=”||||false|false” custom_padding=”25px|20%|||false|false” border_width_left=”1px” border_color_left=”rgba(0,0,0,0)”][et_pb_column type=”4_4″ _builder_version=”4.4.1″][et_pb_image src=”\/\/cdn.berg-software.com\/wp-content\/uploads\/Evolution-of-22remote-work22-on-Google-Trends.png” alt=”Evolution of %22remote work%22 on Google Trends” title_text=”Evolution of %22remote work%22 on Google Trends” _builder_version=”4.4.6″][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=”on” gutter_width=”3″ _builder_version=”4.4.1″ custom_margin=”||||false|false” custom_padding=”25px|20%|||false|false” border_width_left=”1px” border_color_left=”rgba(0,0,0,0)”][et_pb_column type=”4_4″ _builder_version=”4.4.1″][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”25px||||false|false” custom_padding=”|||25px|false|false” hover_enabled=”0″ border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Whether you want to expand your own remote work system beyond lockdowns, or looking into long term outsourcing \/ nearshoring solutions, we think you will benefit from:<\/p>\n Lower costs<\/strong><\/p>\n Access to skills<\/strong><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=”on” gutter_width=”3″ _builder_version=”4.4.1″ custom_margin=”||||false|false” custom_padding=”25px|20%|||false|false” border_width_left=”1px” border_color_left=”rgba(0,0,0,0)”][et_pb_column type=”4_4″ _builder_version=”4.4.1″][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”25px||||false|false” custom_padding=”|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n The first prerequisite for remote software development is your partner\u2019s environmental security (i.e. everything from processes, flows, data, communications etc.). Regardless of your company\u2019s focus, we strongly believe you should go past the mere antivirus coverage, and dive deep into:<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n You will want to make sure that \u201cdata in transit\u201d* is secure. Your suppliers and \/ or employees should protect data while transiting networks, against tampering and eavesdropping, by using a mix of network protection and encryption. Never allow for any HTTP connections to be used. Please insist on any other used protocols to be secured and encrypted.<\/p>\n * \u201cInformation that flows over the public or untrusted network such as the Internet and data that flows in the confines of a private network such as a corporate or enterprise Local Area Network.\u201d (via Wikipedia<\/a>)<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” hover_enabled=”0″ border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Request your suppliers (and support your employees) to protect the assets \/ physical support of your data, in order to make sure that it\u2019s not tampered, lost or damaged. Depending on your business\u2019 specifics, you can make sure that some or all of these actions are applied:<\/p>\n Data at rest protection<\/strong>: security procedures around data that is being stored in a stable medium; ensure that stored data is not vulnerable to hacking or other unauthorised access.<\/p>\n Physical resilience and availability<\/strong>: make sure there are mechanism to cope \/ backup \/ compensate in the event of an outage.<\/p>\n Physical location<\/strong>: prevent any unauthorized individuals from gaining physical access to the data devices \/ data center.<\/p>\n Data center security<\/strong>: avoid unauthorized access and manipulation of your data center’s resources (e.g. denial-of-service (DoS), theft of confidential information, data alteration, data loss etc.)<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Request your supplier (and \/ or employee) to separate different data involved in a service, in order to prevent malicious or compromised users from affecting the service or data of another service.<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Insist that your suppliers\u2019 software development lifecycle processes integrate best practices for confidentiality, integrity and availability protection.<\/p>\n Avoid all software security vulnerabilities (e.g. the OWASP Top Ten<\/a> or CWE listings<\/a>).<\/p>\n Take precautions that any own, 3rd party or open source software used for providing the Supplier services do not contain known backdoors, viruses, trojans or other kind of malicious code.<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” hover_enabled=”0″ border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Established clear and strict processes and procedures to ensure the operational security of services, including:<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”||||false|false” custom_padding=”25px|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n Personnel security screening and \/ or security education is performed regularly and is adequate for all resources utilized.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=”on” gutter_width=”3″ _builder_version=”4.4.4″ custom_margin=”||||false|false” custom_padding=”25px|20%|75px||false|false” border_width_left=”1px” border_color_left=”rgba(0,0,0,0)”][et_pb_column type=”4_4″ _builder_version=”4.4.1″][et_pb_text _builder_version=”4.4.6″ text_font=”|300|||||||” text_font_size=”14px” text_line_height=”1.5em” quote_font=”|700|||||||” quote_text_align=”left” quote_font_size=”16px” header_2_text_color=”#ff6317″ header_2_font_size=”30px” header_3_font_size=”23px” header_4_font=”||||||||” header_4_font_size=”16px” header_4_line_height=”1.5em” header_5_font_size=”14px” custom_margin=”25px||||false|false” custom_padding=”|||25px|false|false” border_width_left=”1px” border_color_left=”#ff6317″]<\/p>\n As you have just figured, at Berg Software we\u2019re a bit of security geeks. Whether it\u2019s NDA, VPN or GDPR, we take it personally. In all our partners\u2019 remote teams, we act like their own employees, both when it comes to integration *and* security protocols. The result: quick, efficient software that just works!<\/p>\n\n
Remote work basics<\/h2>\n
\n
\n
Security-related challenges of remote work<\/h2>\n
Protection of transferred data and communication<\/h3>\n
Asset protection and resilience<\/h3>\n
\n
Separation of data<\/h3>\n
Secure Development<\/h3>\n
Operational Security<\/h3>\n
\n
Personnel Security<\/h3>\n
\u2014<\/h2>\n