Developing Fox-IT’s CSR policy
We helped cyber security company Fox-IT develop a CSR policy. This was a unique experience: Fox-IT was the first to define what CSR meant for a company in this dynamic sector. The result of a thorough and participatory process, which involved stakeholder consultations, was a tailor-made policy. It addressed a series of issues that are rather specific to the sector, such as privacy and misuse of information, zero days, back doors, pen tests and deep packet inspection. Endorsed by Fox-IT’s board of director, the policy also contained a code of conduct and a framework to assess clients.