Regular testing
Periodic verification of the effectiveness of technical measures.
home / compliance
compliance · GDPR
GDPR Article 32 security testing: technical measures
Article 32 asks for regular verification of the effectiveness of technical measures. A documented test is direct proof.
what the standard asks
What the article asks.
Appropriate measures
Measures proportionate to the risks for personal data.
what we produce
The evidence we deliver.
Test report
Scope, dates, method and vulnerabilities.
Limited personal data
Personal data handled only as far as needed to demonstrate a vulnerability.
Tracked fixes
Each vulnerability with its status and closure date.
Repeat
A test repeated after fixes.
summary
At a glance.
| Item | Detail |
|---|---|
| Who judges | The national supervisory authorities |
| Related services | OWASP Top 10 testing, access and business logic |
| Typical frequency | At least yearly and after significant changes |
Limits. Article 32 does not require a certification. The documented test is the proof that the technical measures work.
Want to document the testing of technical measures?
We reply by hand with a written proposal.