Example of tests ( certified products are published on the krm homepage ) :<\/p>\n
Provider<\/strong>:<\/p>\n User<\/strong>:<\/p>\n There are a large number of cases in which a GeB\u00fcV audit may be considered. A distinction must be made between the user and the supplier perspective :<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n The basis of the assessment is formed by the fundamentals collected by krm and updated over the years from the laws such as OR, GeB\u00fcV, VAT laws, data protection laws as well as from our reference books. The long experience Revision security does not exist<\/strong> The Business Records Ordinance ( GeB\u00fcV ) contains detailed requirements on technical Continue reading in book chapter 6.4 on p.278<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Testing & certification of digitization solutions (providers & users) In the context of digitization, the question is repeatedly raised as to whether the planned solution is legally compliant. The Business Records Ordinance ( GeB\u00fcV ) is the authoritative framework for keeping and storing electronic information in Switzerland. Almost all laws in Switzerland refer to them […]<\/p>\n","protected":false},"author":3,"featured_media":5869,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[53,354],"tags":[353,355],"dipi_cpt_category":[],"class_list":["post-74021","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-grundlagen-en","category-publications","tag-book-excerpt","tag-book-information-governance"],"yoast_head":"\n\n
\n
![\"\"](\"https:\/\/krm.swiss\/wp\/wp-content\/uploads\/2021\/07\/Zertifizierung.jpg\")
<\/p>\n
\nof the krm experts helps to identify the right test basis. Depending on the customer’s needs, we obtain additional frameworks ( e.g. ISO standards, industry-specific specifications ) and contracts
\nwith third parties ( cloud, outsourcing ). Of course, corporate governance principles and security requirements as well as the ICS are also taken into account.<\/p>\n
\nThe rationale for this can be found in 4.12. The legal basis in Switzerland differs from other countries such as Germany in the following points :<\/p>\n
\nLevel. For example, the requirements for immutability are described in detail. There are also requirements for logging access, data migration and data separation (management vs. storage).
\npursuant to Art. 958 f of the Swiss Code of Obligations ).<\/p>\n\n