The definition of data integrity is completeness, consistency, timeliness, accuracy, and validity. This means that Kvadrat must take good care of and control of all processed data and training our employees is a priority for us. Ensure that measures are implemented to protect against wilful or accidental loss, damage, or unauthorized change. Kvadrat must also take steps to uphold continuous control, integrity, availability, and confidentiality of all data under Kvadrat’s responsibility.
Our integrity measurements
2.1 Ensuring data quality
Quality is one of our core values. In alignment with this strive for excellence, Kvadrat is pursuing quality data to support better decision making, e.g., prioritising material choices for client. Learning from data and making data-driven decisions inhibits also great risk. There are ethical factors that need to be considered when using data to optimize key business processes. In Kvadrat quality data is defined as a strong balance between data accuracy and its ethical strength, meaning the absence of causing ethical harm.
2.2 Developing responsible data users
A data user is a person that is processing data in IT systems. In Kvadrat our data users only have access to data for which they have a legitimate work purpose, and they receive appropriate training regarding integrity, availability, and confidentiality. All our employees are required to follow specific policies, guidelines, and business procedures. The data users are responsible for reporting any suspicion regarding misuse, accidental access, security issues etc. All our employees follow an onboarding program that consists of e-learning, and introduction to our Privacy Policy, and IT Security Policy. Departments and subsidiaries which have extensive data-driven processes will also receive specific training.
2.3 Governing risk and opportunities
All major acquisitions of new software must be approved by Kvadrat´s Technology Board, represented by selected colleagues from different departments across Kvadrat. The Technology Board has a defined process for evaluating technology choices, which also considers cost, legal and ethical aspects. During 2022, the board defined a set-up for technology assessment for the existing technology portfolio. For the process of implementing new software Kvadrat also launched a risk assessment tool that must be used before the implementation of a new IT system. This risk assessment provides Kvadrat with an evaluation of risks in IT systems. It makes sure that the security levels in Kvadrat are met both at its introduction, but also during the lifespan of the use of technology to secure ongoing compliance towards legislation. Going forward we will expand the tool to also include more ethical related risk assessment criteria. As an important governing body our Technology Board ensures security, policy, and process alignment across different departments.
Security of data and data ethics are intertwined and are dependent on each other to secure data against threats and to gain and uphold the trust of data subjects. In Kvadrat we have a strong focus on security, and we, therefore, employ the best protection, advice, and training to avoid internal or external corruption and unauthorized access.