Our Approach for a Secure Digital Future
In an era where digital threats are increasingly sophisticated, effective information security is no longer optional—it’s essential for all businesses. At SmartCraft, we view security as much more comprehensive than simply technical solutions—it’s an integrated strategy influencing every part of our organization, from our platforms to our people.
To share insights into how SmartCraft approaches information security, we spoke with our CTO, Christian Saleki, about key aspects of our strategy.
Why information security matters
Cybersecurity today is drastically different from 10 or 20 years ago. Cyber threats like ransomware, phishing, and data breaches are common threats faced by companies large and small. SmartCraft does not wait for threats to materialize—we invest proactively in security infrastructure, people, and processes.
A comprehensive security strategy
Christian Saleki outlines our internal security strategy, which relies on a centralized Microsoft-based ecosystem designed to ensure optimal protection. All company-issued connected devices automatically receive continuously updated security profiles—encryption settings, firewall configurations, and essential security updates.
Additionally, we partner with external security providers for continuous monitoring, ensuring that any unusual activity is promptly detected and addressed through predefined response procedures, keeping our infrastructure secure around the clock.
Technical measures alone are not enough
Human factors are recognized as equally important as technical ones. At SmartCraft, all employees participate in modern educational methods designed to be simple and effective. Known as microtraining, this approach involves short, regular digital training modules that appear frequently. Each session takes less than ten minutes and ends with a brief quiz to strengthen learning outcomes.
Because security trends evolve rapidly, training content remains current, continuously refreshed through collaboration with external security-awareness experts. This method significantly raises employee knowledge and engagement regarding current threats and best practices, says Christian Saleki.
Customer rights and GDPR compliance
Managing customer data responsibly is one of our key priorities. We are fully committed to GDPR principles—such as data minimization, transparency, and protecting customer rights. We routinely delete data that is no longer necessary, and we ensure customers can easily view, correct, or request deletion of their personal information, often referred to as ‘the right to be forgotten’. Our digital solutions generally give customers direct access and insight into the information stored about them.
Security testing gives peace of mind
Christian Saleki proudly informs that we’ve recently implemented enhanced automated penetration-testing tools across all SmartCraft solutions. This allows us to run penetration tests more frequently and effectively, identifying and addressing vulnerabilities early, rather than relying solely on traditional manual tests performed annually.
Christian Saleki compares this practice to vehicle safety:
“Having airbags and seatbelts is essential, but manufacturers still continuously perform crash tests. Similarly, our systems benefit greatly from regular tests to confirm they’re secure and resilient.”
With our new testing solution soon fully operational, we gain real-time proof of security, enabling continuous improvement. From an organizational standpoint, this proactive approach not only strengthens our solutions, but also provides peace of mind, knowing we maintain security at the highest possible standards.
In doing so, we aim not only to maintain business resilience but, importantly, to safeguard the trust placed in us by our customers and partners.
For further queries, please contact:
Christian Saleki, CTO
Email: christian.saleki@smartcraft.com
Phone: +46 736733066
