Visma Application Security Program and Cloud Delivery Model

This guide provides detailed information about the Visma Application Security Program (VASP) and the Visma Cloud Delivery Model (VCDM), intended for public distribution. The document outlines the importance of security and data protection for Visma's products and services, which range from Software as a Service (SaaS) to locally installed applications. It describes VASP as a custom application security program tailored to different products, ensuring compliance with application security, data protection, and privacy throughout the product lifecycle. Additionally, it details VCDM as an Information Security Management System certified under ISO 27001, focusing on cloud service delivery. The guide emphasizes the roles of development teams and dedicated security personnel in maintaining security standards and compliance. It also clarifies the distinctions between application security, privacy, and data protection, highlighting the responsibilities of the Data Protection Manager in ensuring compliance with regulations such as GDPR. Overall, the document serves to inform customers about Visma's commitment to security and data protection.