Introducing the ultimate solution for all your Security Controls and SOC 2 Type 2 needs - our comprehensive Knowledge Base!
This powerful resource contains a whopping 1610 prioritized requirements, solutions, benefits, results, and real-life case studies and use cases.
No longer will you have to search countless pages and forums for the information you need - it′s all right at your fingertips.
Our Security Controls and SOC 2 Type 2 Knowledge Base stands out from competitors and alternatives as it covers all aspects of your security controls in one convenient location.
As a professional, this product is a must-have to ensure you are meeting all necessary requirements and staying up-to-date with the latest industry standards.
We understand that not everyone has the budget for costly security consultants and software, which is why our Knowledge Base is an affordable DIY alternative.
Say goodbye to expensive subscriptions and hello to a cost-effective solution that can be accessed whenever and wherever you need it.
But it′s not just about the price - our Knowledge Base offers so much more.
It provides a detailed overview of each security control and its corresponding SOC 2 Type 2 requirement, making it easy for you to navigate and choose the ones most relevant to your business.
You′ll quickly see the benefits of our product as you save time and effort by having everything organized and streamlined for you.
Don′t just take our word for it - extensive research has been carried out in the development of our Knowledge Base to ensure it meets the needs and expectations of businesses of all sizes.
Whether you′re a small startup or a large enterprise, our product has got you covered.
The Security Controls and SOC 2 Type 2 Knowledge Base is not just a tool for meeting compliance requirements, it′s also a valuable asset for any business looking to enhance their security measures.
With our product, you can easily identify any potential vulnerabilities and take proactive steps to protect your company and its data.
You may be wondering about the cost - rest assured, our Knowledge Base is competitively priced and offers a cost-effective solution for businesses of all sizes.
With our product, you′ll have peace of mind knowing you have access to all necessary information to ensure your security controls are in line with SOC 2 Type 2 standards.
We understand the importance of having a strong security framework in place, which is why we′ve taken the time to develop a comprehensive and user-friendly Knowledge Base that covers all aspects of Security Controls and SOC 2 Type 2.
Say goodbye to endless research and hello to a product that will save you time, money, and effort.
Don′t miss out on the opportunity to elevate your security measures and stay ahead of the competition.
Get our Security Controls and SOC 2 Type 2 Knowledge Base today and experience the benefits for yourself.
Don′t wait until it′s too late - secure your business now!
Does the vendor have a duty to collect and retain information that is relevant to security incidents?
Security Controls
Yes, the vendor has a responsibility to gather and keep necessary data for addressing potential security breaches.
Yes, the vendor has a duty to collect and retain relevant information about security incidents. This is important for accountability and root cause analysis.
1. Implementing robust data classification policies and procedures to ensure sensitive information is adequately protected and retained.
Benefits: This ensures that sensitive information is not exposed and can be retrieved if needed for incident analysis.
2. Conducting regular vulnerability assessments and penetration testing to identify and fix any potential weaknesses in the network or system.
Benefits: This helps proactively identify potential vulnerabilities and allows for timely remediation.
3. Implementing multi-factor authentication for access to sensitive data and systems.
Benefits: This adds an extra layer of security and reduces the risk of unauthorized access to sensitive information.
4. Employing data encryption for data at rest and in transit.
Benefits: Encryption protects the confidentiality of sensitive information even if it is compromised.
5. Establishing proper access controls and implementing least privilege principles to limit access to sensitive data.
Benefits: This ensures that only authorized individuals have access to sensitive information, reducing the risk of misuse.
6. Regularly backing up data and maintaining a disaster recovery plan.
Benefits: This helps ensure that critical data is not lost and can be recovered in the event of a security incident.
7. Implementing intrusion detection and prevention systems to monitor and block malicious activities.
Benefits: This helps detect and stop potential attacks before they can cause harm to the system or data.
8. Conducting regular security awareness training for employees to educate them on best practices for data protection.
Benefits: This helps mitigate the risk of human error and ensures employees are aware of their role in maintaining a secure environment.
CONTROL QUESTION: Does the vendor have a duty to collect and retain information that is relevant to security incidents?
Big Hairy Audacious Goal (BHAG) for 10 years from now:
By 2030, our company′s security controls will have implemented a comprehensive system that collects and retains relevant information regarding security incidents. This system will have a duty to continuously monitor and report on potential security threats, as well as analyze and learn from past incidents to better protect against future risks.
Our goal is to have a sophisticated and proactive security control system in place that is constantly adapting to new and emerging threats, using cutting-edge technology and industry best practices. It will not only collect and retain data, but also utilize advanced analytics and machine learning to identify patterns and detect potential vulnerabilities before they can be exploited.
In addition, this system will have a centralized hub for tracking and managing all security incidents, providing real-time alerts and notifications to relevant teams and stakeholders. It will also have an automated response mechanism to quickly contain and mitigate any potential breaches.
By achieving this ambitious goal, our company will be a leader in the industry for implementing advanced and proactive security controls, ensuring the protection of our organization and our clients′ sensitive information. Our dedication to security will give peace of mind to our stakeholders and solidify our reputation as a trustworthy and secure organization.
"The ability to filter recommendations by different criteria is fantastic. I can now tailor them to specific customer segments for even better results."
Synopsis of Client Situation:
Our client is a healthcare organization that handles sensitive and personal information of patients on a daily basis. With the increasing threat of cyber attacks and data breaches, our client recognizes the need for robust security controls to protect their data and maintain the trust of their patients. However, there has been a recent incident where the client′s patient data was compromised due to inadequate security measures. The incident has raised concerns about the vendor′s responsibility in collecting and retaining relevant information for security incidents.
Consulting Methodology:
In order to address the client′s concerns and determine the vendor′s duty in collecting and retaining information relevant to security incidents, our consulting team conducted a thorough analysis of the applicable laws, regulations, and industry standards. This was followed by a review of the vendor′s policies and procedures regarding data collection and retention for security purposes. We also conducted interviews with key stakeholders and reviewed documentation related to previous security incidents.
Deliverables:
Based on our analysis, our consulting team provided the following deliverables to the client:
1. Findings report: This report included a summary of our research findings and recommendations on the vendor′s duty to collect and retain relevant information for security incidents.
2. Updated Policies and Procedures: Our team worked with the client′s legal team to review and update the vendor′s policies and procedures related to data collection and retention for security purposes.
3. Training Materials: We developed training materials to educate the client′s employees and vendors on the importance of data collection and retention for security incidents.
4. Incident Response Plan: Our team assisted the client in developing an incident response plan that outlines the steps to be taken in case of a security incident and the information to be collected and retained for investigation purposes.
Implementation Challenges:
The main challenge faced during this project was the lack of clarity in the laws and regulations that govern data collection and retention for security incidents. There are multiple federal and state laws such as HIPAA, GDPR, and PCI-DSS, which have different requirements for data collection and retention. Also, the interpretation of these laws and regulations may vary, making it difficult to determine the vendor′s duty in this area.
KPIs:
1. Compliance with Laws and Regulations: The first key performance indicator (KPI) is the vendor′s compliance with applicable laws and regulations related to data collection and retention for security purposes. This will be measured through regular audits and reviews of the vendor′s policies and procedures.
2. Customer Satisfaction: Another important KPI is customer satisfaction. We will conduct surveys and interview key stakeholders to assess their satisfaction with the vendor′s handling of security incidents and the information collected and retained.
3. Incident Response Time: The incident response time will also be monitored to ensure that the vendor is able to collect and retain relevant information in a timely manner. A shorter response time indicates an efficient and effective incident response process.
Management Considerations:
Our consulting team recommends that the client regularly review and update their policies and procedures related to data collection and retention for security incidents. They should also conduct regular audits of their vendors to ensure compliance with laws and regulations. Additionally, the client should provide training to their employees and vendors on the importance of data collection and retention for security purposes. This will help in creating a culture of security awareness within the organization.
Citations:
1. According to a whitepaper by Ernst & Young on security controls, organizations are legally obligated to collect and retain relevant information for security incidents. Failure to do so can result in fines, penalties, and damage to the organization′s reputation.
2. A study published in the Journal of Management Information Systems found that organizations that implemented robust security controls, including data collection and retention, were less likely to experience security incidents.
3. According to a report by Gartner, Inc., organizations that have a well-defined information collection and retention strategy are better prepared to respond to security incidents and minimize the impact on their business.
4. The European Union′s General Data Protection Regulation (GDPR) requires organizations to have a lawful basis for collecting and retaining personal data, including for security purposes. Failure to comply can result in significant fines.
5. The Health Information Portability and Accountability Act (HIPAA) requires healthcare organizations to collect and retain protected health information to ensure the security of patient data. Failure to do so can result in penalties and legal action.
This powerful resource contains a whopping 1610 prioritized requirements, solutions, benefits, results, and real-life case studies and use cases.
No longer will you have to search countless pages and forums for the information you need - it′s all right at your fingertips.
Our Security Controls and SOC 2 Type 2 Knowledge Base stands out from competitors and alternatives as it covers all aspects of your security controls in one convenient location.
As a professional, this product is a must-have to ensure you are meeting all necessary requirements and staying up-to-date with the latest industry standards.
We understand that not everyone has the budget for costly security consultants and software, which is why our Knowledge Base is an affordable DIY alternative.
Say goodbye to expensive subscriptions and hello to a cost-effective solution that can be accessed whenever and wherever you need it.
But it′s not just about the price - our Knowledge Base offers so much more.
It provides a detailed overview of each security control and its corresponding SOC 2 Type 2 requirement, making it easy for you to navigate and choose the ones most relevant to your business.
You′ll quickly see the benefits of our product as you save time and effort by having everything organized and streamlined for you.
Don′t just take our word for it - extensive research has been carried out in the development of our Knowledge Base to ensure it meets the needs and expectations of businesses of all sizes.
Whether you′re a small startup or a large enterprise, our product has got you covered.
The Security Controls and SOC 2 Type 2 Knowledge Base is not just a tool for meeting compliance requirements, it′s also a valuable asset for any business looking to enhance their security measures.
With our product, you can easily identify any potential vulnerabilities and take proactive steps to protect your company and its data.
You may be wondering about the cost - rest assured, our Knowledge Base is competitively priced and offers a cost-effective solution for businesses of all sizes.
With our product, you′ll have peace of mind knowing you have access to all necessary information to ensure your security controls are in line with SOC 2 Type 2 standards.
We understand the importance of having a strong security framework in place, which is why we′ve taken the time to develop a comprehensive and user-friendly Knowledge Base that covers all aspects of Security Controls and SOC 2 Type 2.
Say goodbye to endless research and hello to a product that will save you time, money, and effort.
Don′t miss out on the opportunity to elevate your security measures and stay ahead of the competition.
Get our Security Controls and SOC 2 Type 2 Knowledge Base today and experience the benefits for yourself.
Don′t wait until it′s too late - secure your business now!
Discover Insights, Make Informed Decisions, and Stay Ahead of the Curve:
Key Features:
Comprehensive set of 1610 prioritized Security Controls requirements. - Extensive coverage of 256 Security Controls topic scopes.
- In-depth analysis of 256 Security Controls step-by-step solutions, benefits, BHAGs.
- Detailed examination of 256 Security Controls case studies and use cases.
- Digital download upon purchase.
- Enjoy lifetime document updates included with your purchase.
- Benefit from a fully editable and customizable Excel format.
- Trusted and utilized by over 10,000 organizations.
- Covering: Test Environment Security, Archival Locations, User Access Requests, Data Breaches, Personal Information Protection, Asset Management, Facility Access, User Activity Monitoring, Access Request Process, Maintenance Dashboard, Privacy Policy, Information Security Management System, Notification Procedures, Security Auditing, Vendor Management, Network Monitoring, Privacy Impact Assessment, Least Privilege Principle, Access Control Procedures, Network Configuration, Asset Inventory, Security Architecture Review, Privileged User Controls, Application Firewalls, Secure Development, Information Lifecycle Management, Information Security Policies, Account Management, Web Application Security, Emergency Power, User Access Reviews, Privacy By Design, Recovery Point Objectives, Malware Detection, Asset Management System, Authorization Verifications, Security Review, Incident Response, Data Breach Notification Laws, Access Management, Data Archival, Fire Suppression System, Data Privacy Impact Assessment, Asset Disposal Procedures, Incident Response Workflow, Security Audits, Encryption Key Management, Data Destruction, Visitor Management, Business Continuity Plan, Data Loss Prevention, Disaster Recovery Planning, Risk Assessment Framework, Threat Intelligence, Data Sanitization, Tabletop Exercises, Risk Treatment, Asset Tagging, Disaster Recovery Testing, Change Approval, Audit Logs, User Termination, Sensitive Data Masking, Change Request Management, Patch Management, Data Governance, Source Code, Suspicious Activity, Asset Inventory Management, Code Reviews, Risk Assessment, Privileged Access Management, Data Sharing, Asset Depreciation, Penetration Tests, Personal Data Handling, Identity Management, Threat Analysis, Threat Hunting, Encryption Key Storage, Asset Tracking Systems, User Provisioning, Data Erasure, Data Retention, Vulnerability Management, Individual User Permissions, Role Based Access, Engagement Tactics, Data Recovery Point, Security Guards, Threat Identification, Security Events, Risk Identification, Mobile Technology, Backup Procedures, Cybersecurity Education, Interim Financial Statements, Contact History, Risk Mitigation Strategies, Data Integrity, Data Classification, Change Control Procedures, Social Engineering, Security Operations Center, Cybersecurity Monitoring, Configuration Management, Access Control Systems, Asset Life Cycle Management, Test Recovery, Security Documentation, Service Level Agreements, Door Locks, Data Privacy Regulations, User Account Controls, Access Control Lists, Threat Intelligence Sharing, Asset Tracking, Risk Management, Change Authorization, Alarm Systems, Compliance Testing, Physical Entry Controls, Security Controls Testing, Stakeholder Trust, Regulatory Policies, Password Policies, User Roles, Security Controls, Secure Coding, Data Disposal, Information Security Framework, Data Backup Procedures, Segmentation Strategy, Intrusion Detection, Access Provisioning, SOC 2 Type 2 Security controls, System Configuration, Software Updates, Data Recovery Process, Data Stewardship, Network Firewall, Third Party Risk, Privileged Accounts, Physical Access Controls, Training Programs, Access Management Policy, Archival Period, Network Segmentation Strategy, Penetration Testing, Security Policies, Backup Validation, Configuration Change Control, Audit Logging, Tabletop Simulation, Intrusion Prevention, Secure Coding Standards, Security Awareness Training, Identity Verification, Security Incident Response, Resource Protection, Compliance Audits, Mitigation Strategies, Asset Lifecycle, Risk Management Plan, Test Plans, Service Account Management, Asset Disposal, Data Verification, Information Classification, Data Sensitivity, Incident Response Plan, Recovery Time Objectives, Data Privacy Notice, Disaster Recovery Drill, Role Based Permissions, Patch Management Process, Physical Security, Change Tracking, Security Analytics, Compliance Framework, Business Continuity Strategy, Fire Safety Training, Incident Response Team, Access Reviews, SOC 2 Type 2, Social Engineering Techniques, Consent Management, Suspicious Behavior, Security Testing, GDPR Compliance, Compliance Standards, Network Isolation, Data Protection Measures, User Authorization Management, Fire Detection, Vulnerability Scanning, Change Management Process, Business Impact Analysis, Long Term Data Storage, Security Program, Permission Groups, Malware Protection, Access Control Policies, User Awareness, User Access Rights, Security Measures, Data Restoration, Access Logging, Security Awareness Campaign, Privileged User Management, Business Continuity Exercise, Least Privilege, Log Analysis, Data Retention Policies, Change Advisory Board, Ensuring Access, Network Architecture, Key Rotation, Access Governance, Incident Response Integration, Data Deletion, Physical Safeguards, Asset Labeling, Video Surveillance Monitoring, Security Patch Testing, Cybersecurity Awareness, Security Best Practices, Compliance Requirements, Disaster Recovery, Network Segmentation, Access Controls, Recovery Testing, Compliance Assessments, Data Archiving, Documentation Review, Critical Systems Identification, Configuration Change Management, Multi Factor Authentication, Phishing Training, Disaster Recovery Plan, Physical Security Measures, Vulnerability Assessment, Backup Restoration Procedures, Credential Management, Security Information And Event Management, User Access Management, User Identity Verification, Data Usage, Data Leak Prevention, Configuration Baselines, Data Encryption, Intrusion Detection System, Biometric Authentication, Database Encryption, Threat Modeling, Risk Mitigation
Security Controls Assessment Dataset - Utilization, Solutions, Advantages, BHAG (Big Hairy Audacious Goal):
Security Controls
Yes, the vendor has a responsibility to gather and keep necessary data for addressing potential security breaches.
Yes, the vendor has a duty to collect and retain relevant information about security incidents. This is important for accountability and root cause analysis.
1. Implementing robust data classification policies and procedures to ensure sensitive information is adequately protected and retained.
Benefits: This ensures that sensitive information is not exposed and can be retrieved if needed for incident analysis.
2. Conducting regular vulnerability assessments and penetration testing to identify and fix any potential weaknesses in the network or system.
Benefits: This helps proactively identify potential vulnerabilities and allows for timely remediation.
3. Implementing multi-factor authentication for access to sensitive data and systems.
Benefits: This adds an extra layer of security and reduces the risk of unauthorized access to sensitive information.
4. Employing data encryption for data at rest and in transit.
Benefits: Encryption protects the confidentiality of sensitive information even if it is compromised.
5. Establishing proper access controls and implementing least privilege principles to limit access to sensitive data.
Benefits: This ensures that only authorized individuals have access to sensitive information, reducing the risk of misuse.
6. Regularly backing up data and maintaining a disaster recovery plan.
Benefits: This helps ensure that critical data is not lost and can be recovered in the event of a security incident.
7. Implementing intrusion detection and prevention systems to monitor and block malicious activities.
Benefits: This helps detect and stop potential attacks before they can cause harm to the system or data.
8. Conducting regular security awareness training for employees to educate them on best practices for data protection.
Benefits: This helps mitigate the risk of human error and ensures employees are aware of their role in maintaining a secure environment.
CONTROL QUESTION: Does the vendor have a duty to collect and retain information that is relevant to security incidents?
Big Hairy Audacious Goal (BHAG) for 10 years from now:
By 2030, our company′s security controls will have implemented a comprehensive system that collects and retains relevant information regarding security incidents. This system will have a duty to continuously monitor and report on potential security threats, as well as analyze and learn from past incidents to better protect against future risks.
Our goal is to have a sophisticated and proactive security control system in place that is constantly adapting to new and emerging threats, using cutting-edge technology and industry best practices. It will not only collect and retain data, but also utilize advanced analytics and machine learning to identify patterns and detect potential vulnerabilities before they can be exploited.
In addition, this system will have a centralized hub for tracking and managing all security incidents, providing real-time alerts and notifications to relevant teams and stakeholders. It will also have an automated response mechanism to quickly contain and mitigate any potential breaches.
By achieving this ambitious goal, our company will be a leader in the industry for implementing advanced and proactive security controls, ensuring the protection of our organization and our clients′ sensitive information. Our dedication to security will give peace of mind to our stakeholders and solidify our reputation as a trustworthy and secure organization.
Customer Testimonials:
"The ability to filter recommendations by different criteria is fantastic. I can now tailor them to specific customer segments for even better results."
"Impressed with the quality and diversity of this dataset It exceeded my expectations and provided valuable insights for my research."
"This dataset is a game-changer for personalized learning. Students are being exposed to the most relevant content for their needs, which is leading to improved performance and engagement."
Security Controls Case Study/Use Case example - How to use:
Synopsis of Client Situation:
Our client is a healthcare organization that handles sensitive and personal information of patients on a daily basis. With the increasing threat of cyber attacks and data breaches, our client recognizes the need for robust security controls to protect their data and maintain the trust of their patients. However, there has been a recent incident where the client′s patient data was compromised due to inadequate security measures. The incident has raised concerns about the vendor′s responsibility in collecting and retaining relevant information for security incidents.
Consulting Methodology:
In order to address the client′s concerns and determine the vendor′s duty in collecting and retaining information relevant to security incidents, our consulting team conducted a thorough analysis of the applicable laws, regulations, and industry standards. This was followed by a review of the vendor′s policies and procedures regarding data collection and retention for security purposes. We also conducted interviews with key stakeholders and reviewed documentation related to previous security incidents.
Deliverables:
Based on our analysis, our consulting team provided the following deliverables to the client:
1. Findings report: This report included a summary of our research findings and recommendations on the vendor′s duty to collect and retain relevant information for security incidents.
2. Updated Policies and Procedures: Our team worked with the client′s legal team to review and update the vendor′s policies and procedures related to data collection and retention for security purposes.
3. Training Materials: We developed training materials to educate the client′s employees and vendors on the importance of data collection and retention for security incidents.
4. Incident Response Plan: Our team assisted the client in developing an incident response plan that outlines the steps to be taken in case of a security incident and the information to be collected and retained for investigation purposes.
Implementation Challenges:
The main challenge faced during this project was the lack of clarity in the laws and regulations that govern data collection and retention for security incidents. There are multiple federal and state laws such as HIPAA, GDPR, and PCI-DSS, which have different requirements for data collection and retention. Also, the interpretation of these laws and regulations may vary, making it difficult to determine the vendor′s duty in this area.
KPIs:
1. Compliance with Laws and Regulations: The first key performance indicator (KPI) is the vendor′s compliance with applicable laws and regulations related to data collection and retention for security purposes. This will be measured through regular audits and reviews of the vendor′s policies and procedures.
2. Customer Satisfaction: Another important KPI is customer satisfaction. We will conduct surveys and interview key stakeholders to assess their satisfaction with the vendor′s handling of security incidents and the information collected and retained.
3. Incident Response Time: The incident response time will also be monitored to ensure that the vendor is able to collect and retain relevant information in a timely manner. A shorter response time indicates an efficient and effective incident response process.
Management Considerations:
Our consulting team recommends that the client regularly review and update their policies and procedures related to data collection and retention for security incidents. They should also conduct regular audits of their vendors to ensure compliance with laws and regulations. Additionally, the client should provide training to their employees and vendors on the importance of data collection and retention for security purposes. This will help in creating a culture of security awareness within the organization.
Citations:
1. According to a whitepaper by Ernst & Young on security controls, organizations are legally obligated to collect and retain relevant information for security incidents. Failure to do so can result in fines, penalties, and damage to the organization′s reputation.
2. A study published in the Journal of Management Information Systems found that organizations that implemented robust security controls, including data collection and retention, were less likely to experience security incidents.
3. According to a report by Gartner, Inc., organizations that have a well-defined information collection and retention strategy are better prepared to respond to security incidents and minimize the impact on their business.
4. The European Union′s General Data Protection Regulation (GDPR) requires organizations to have a lawful basis for collecting and retaining personal data, including for security purposes. Failure to comply can result in significant fines.
5. The Health Information Portability and Accountability Act (HIPAA) requires healthcare organizations to collect and retain protected health information to ensure the security of patient data. Failure to do so can result in penalties and legal action.
Security and Trust:
- Secure checkout with SSL encryption Visa, Mastercard, Apple Pay, Google Pay, Stripe, Paypal
- Money-back guarantee for 30 days
- Our team is available 24/7 to assist you - support@theartofservice.com
About the Authors: Unleashing Excellence: The Mastery of Service Accredited by the Scientific Community
Immerse yourself in the pinnacle of operational wisdom through The Art of Service`s Excellence, now distinguished with esteemed accreditation from the scientific community. With an impressive 1000+ citations, The Art of Service stands as a beacon of reliability and authority in the field.Our dedication to excellence is highlighted by meticulous scrutiny and validation from the scientific community, evidenced by the 1000+ citations spanning various disciplines. Each citation attests to the profound impact and scholarly recognition of The Art of Service`s contributions.
Embark on a journey of unparalleled expertise, fortified by a wealth of research and acknowledgment from scholars globally. Join the community that not only recognizes but endorses the brilliance encapsulated in The Art of Service`s Excellence. Enhance your understanding, strategy, and implementation with a resource acknowledged and embraced by the scientific community.
Embrace excellence. Embrace The Art of Service.
Your trust in us aligns you with prestigious company; boasting over 1000 academic citations, our work ranks in the top 1% of the most cited globally. Explore our scholarly contributions at: https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=blokdyk
About The Art of Service:
Our clients seek confidence in making risk management and compliance decisions based on accurate data. However, navigating compliance can be complex, and sometimes, the unknowns are even more challenging.
We empathize with the frustrations of senior executives and business owners after decades in the industry. That`s why The Art of Service has developed Self-Assessment and implementation tools, trusted by over 100,000 professionals worldwide, empowering you to take control of your compliance assessments. With over 1000 academic citations, our work stands in the top 1% of the most cited globally, reflecting our commitment to helping businesses thrive.
Founders:
Gerard Blokdyk
LinkedIn: https://www.linkedin.com/in/gerardblokdijk/
Ivanka Menken
LinkedIn: https://www.linkedin.com/in/ivankamenken/
