About YUCAN.
YUCAN is a certification company based in Amsterdam. The company works with its own online applications, which run on multiple servers and are maintained by external developers.
For a certification body, reliability is doubly important. Customers rely on the outcome of a certification, so the underlying technology must also be auditable: who has access, what was changed, and who approved it.
The challenge.
A certification company must be able to demonstrate that its own environment is in order. For YUCAN, this came down to three key points.
- Documenting everything. Management could not depend on what someone happened to know; access and changes had to be traceable.
- Changing developers. External developers were granted access for a project and had to demonstrably lose that access afterward.
- Multiple servers and domains. Applications, databases, and DNS were interconnected, without the company employing its own internal administrator.