Security

Somewhat related to ethics, there are lots of security standards for software and services we produce. Research is not production, but there are still many different considerations we must consider, whether it is using software that others make, releasing software, or building services.

There are many Aalto-level standards for IT security. Unfortunately, many of them are not designed for research, which makes our job difficult. This conflict needs to be carefully managed. A lot like ethics, everyone needs to have a basic knowledge of security issues and our team must have a few experts.

• Basics

  • Don’t share accounts, know your data rating, handle it correctly

• Know basics

  • Decide security level needed for data. Don’t over classify

  • Select right systems for this

• Security and compliance processes

• Common working practices