Vendor compliance
On behalf of institutions, we perform privacy and security risk analyses on vendors. In this way, we jointly fulfil statutory obligations. By combining expertise, we achieve cost savings, knowledge sharing and, on behalf of the education and research sector, we have a stronger negotiating position towards vendors.
SURF continues to advise educational and research institutions to exercise caution when deploying Microsoft 365 Copilot. Although Microsoft has made improvements to the AI assistant since SURF first…
News
SURF has carried out a Data Protection Impact Assessment (DPIA) on HR2day, an all-round HRM and payroll system. The assessment identified 16 high-risk issues. HR2day has stated that it will implement…
News
''We'd love to hear which compliance pathways you think are important''.