New Data security audit at target (2020)

An independent auditor confirms that target has implemented and continuously improved its data security requirements.

The independent auditor confirms that target has implemented and continuously improved the data security requirements.

Data protection has been a very high priority for all employees at target since the appointment of the data protection officer in 2016. As a contractor of project and maintenance services, target comes into contact with personal data in many cases. In the terminology of the General Data Protection Regulation (GDPR), we are therefore processors.

We want to and must continue to ensure a high level of data security when processing personal data in order to protect the trust that our customers place in us.

All employees at target are sensitised to the topic of data security through regular, mandatory training. In addition, we are audited annually by an independent body to determine whether the required standards are met.

The 2020 audit, which was delayed until the end of the year due to the pandemic, builds on the 2019 report and includes adjustments that have been implemented since that report. The current audit is valid until the end of 2021 and takes into account the audit of critical aspects of data security.

On the one hand, the role of target Software Solution GmbH as a processor was examined more closely. Thus, one focus was on the audit of the automated IT processes and their documentation.

In 2020, target is again independently certified as having a good result. It says: "... Essential requirements and suggestions for improving the individual points were examined and - where possible - implemented. Due to the implemented measures, a clear improvement of the rating was achieved. Individual areas have to be reviewed regularly due to the constant changes in the systems and will therefore be part of the audit again in the coming year (2021) ..."

Among other things, the technical organisational measures (TOM) were examined, in detail for the sub-areas of admission and entry control, access control, data carrier control, storage control, user control, transmission / transport control, input control, recoverability / reliability / availability, data integrity, order control and evaluation / monitoring and organisational control.

Measures were defined and implemented with our data protection officer for each of the aforementioned sub-areas of data security. Further contingency plans were developed and the  directories of procedures were completed.

Another focus was the review of the contracts for commissioned processing with critical service providers and their TOM. A Controller Processor Agreement exists between these service providers and target in accordance with the current specifications of the Gesellschaft für Datenschutz und Datensicherheit e. V. (GDD). target ensures that the service providers are carefully selected with regard to data security. The data security measures of critical service providers are checked every 12 months at the latest, of other service providers every 24 months.

At target, data protection and data security is a topic that is treated with high priority and is continuously developed - depending on the technical possibilities.

Security, Identity & Access Management
Service

Security, Identity & Access Management

Time and again we hear about hacker attacks on companies that target sensitive company data. Therefore, security and access control of data must never be neglected.

News 1/1/22

New shareholder structure at target Software Solution GmbH

Hanno Hofmann, founder of Walldorf Consulting AG, acquires all shares in target Software Solution GmbH.

Headerbild zur offenen und sicheren IT bei Versicherungen
Service

Open and secure IT

Just a few years ago, insurers were reluctant to move into the cloud or platform world. Concerns about security and governance often prevailed. The paradigm has changed.

News 6/17/22

The new target Idea Management Release SVP 9 is now availabl

The new SVP 9 release of our on-premise software target Idea Management offers numerous advantages. The highlight: complete workflow mapping with Fiori apps!

CLOUDPILOTS Software consulting
Produkt

Security

The security features of the Google Cloud Platform are considered the best in the world. Of course, stored data is always stowed away in a GDPR-compliant manner. In addition to the mandatory regulations, Google has implemented extra security features for the well-being of users.

News 7/10/22

New target Idea Management Release SVP 10 is now available

The new release offers numerous advantages. Among them: Even better user interface made possible by SAP Fiori 3!

Referenz 2/25/25

vdek introduces new Data Warehouse solution

The TIMETOACT GROUP supports the Verband der Ersatzkassen e. V. in the switch from a system environment to the latest IBM technology.

Technologie Übersicht 2/25/25

Beta Systems Software AG

For more than two decades, Beta Systems has been developing platform-independent and instruction-spanning software products. TIMETOACT works closely with the vendor and, as the largest partner, has already implemented several IAG and IAM projects.

Headerbild IT Security
Service

IT security – protection against cyber attacks

IT security is becoming more and more important. We help organizations to implement appropriate and effective security structures, processes and controls.

News 1/20/25

beBOLD becomes part of TIMETOACT GROUP

Cologne/Hamburg, January 20, 2025 – TIMETOACT GROUP, a leading provider of IT services for large enterprises, mid-sized businesses, and public institutions, has acquired beBOLD, an independent consultancy specializing in cloud transformation projects. The two founders and managing directors of beBOLD will continue to lead the company after the transaction and oversee its integration into the TIMETOACT GROUP.

Teaserbild zu Software Asset Management (SAM)
Service

Reduce your costs with Software Asset Management (SAM)!

Companies find it increasingly difficult to keep track of the software they use. We support you in this!

Atlassian Access - Cloud Competence Center
Produkt 2/25/25

Atlassian Access

Atlassian Access offers a central admin console for managing the cloud products used, such as Jira, Confluence, Bitbucket and Trello.

Kompetenz

Artificial Intelligence & Data Strategy

Every company collects and manages vast amounts of data, e.g. from production processes or business transactions.

Branche 2/20/25

Insurance

Insurance companies live by making a promise to people - and that promise is security.

Technologie 2/25/25

Atlassian Enterprise Cloud

Enterprise-class scaling, security and governance for the Atlassian Cloud.

Branche

Healthcare

IT and digitalisation are too often seen in Germany as pure cost drivers, without taking into account the revenue opportunities and potentials. We know the challenges in the healthcare sector and help you find the best IT solutions.

Headerbild Talend Data Integration
Technologie

Talend Data Integration

Talend Data Integration offers a highly scalable architecture for almost any application and any data source - with well over 900 connectors from cloud solutions like Salesforce to classic on-premises systems.

Lösung 2/25/25

Migrate to the Google Cloud with CLOUDPILOTS

Migrate easily to the Google Cloud Platform with Cloud Pilots. Reduce costs, enhance security, optimize scalability, and modernize your workloads.

Kompetenz

Governance & Operational Excellence

Digitalization inevitably leads to business processes changing and roles and responsibilities being redistributed. At the same time, new legal requirements, regulations and standards need to be met.

Wissen 2/25/25

The "Beautiful five" and the Power of "One-Number" Reporting

Key figures are a perennial favorite in idea management, have been used for many years (decades) and are now very topical again. The reasons are obvious. You want to set performance benchmarks, define targets, follow up on where things are not going so well and measure the success or failure of idea management.

Bleiben Sie mit dem TIMETOACT GROUP Newsletter auf dem Laufenden!