Recording responsibilities traceably
Document how information security is managed and who takes on which tasks. Manage policies and approvals centrally so that internal responsible staff and external partners can work on a shared basis.
Use cases
Information security for pension funds
Keep the overview. Work together with everyone involved.
Pension funds process sensitive data on insured persons and benefits. To operate, they depend on working applications and reliable IT service providers.
Sardona helps you organise your information security: record responsibilities, assess risks, track measures and present the current status traceably.
When IT is provided by others, coordination remains
Whether an external service provider or a central IT organisation runs the systems: the pension fund needs an overview of its own requirements, the agreed tasks and open security issues.
The relevant information is often stored in different places. Technical reports come from the IT provider, internal requirements are set out in documents and measures are tracked in separate lists.
Sardona brings this information together in a shared working basis.
How Sardona supports your pension fund
Assessing risks and tracking measures
Capture risks relating to data, applications, business processes and service providers. Decide how to deal with them and assign measures, owners and deadlines.
This allows you to feed findings from assessments and security reviews into ongoing work and track how they are handled.
Structuring collaboration with IT service providers
Record which service providers are relevant to your security work. Collect information and evidence via the supplier portal and document your assessment.
This creates a basis for discussions about open questions, necessary improvements and their implementation.
Being prepared for disruptions to key processes
Which processes must continue even during an IT outage? Which applications and service providers are needed for this?
Capture critical business processes and their dependencies. Document recovery strategies and responsibilities. With scenario-based crisis exercises, you can test your joint approach and record improvements.
Documenting how personal data is handled
Keep a record of your processing activities. Document purposes, data categories, recipients and retention periods.
Sardona also supports you in handling requests from data subjects and documenting data breaches.
A basis for executive management and the board of trustees
Present the status of your information security traceably: Which risks are known? Which measures are under way? Where is action needed?
Central evidence and reports support internal reporting and preparation for audits. The development of your security work remains traceable even when contact persons change.
Usable with your existing organisation
You can use Sardona with your internal responsible staff and existing IT partners. Optional integrations complement the organisational view with technical security information.
Sardona is developed and operated by Burri Consulting. Consulting, implementation support and CISO as a Service can be agreed separately if required.
Discover CISO as a Service →Swiss application and AI infrastructure
Sardona’s application and portal servers are operated in Switzerland. Regional deployments in Switzerland are set up for the AI functions.
Security and data protection →Get to know Sardona for your pension fund
Based on your situation, we show you how to organise responsibilities, risks, measures and evidence with Sardona.
Request a demo