<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Isotoma: Our blog</title>
	<atom:link href="https://isotoma.com/blog/feed/" rel="self" type="application/rss+xml" />
	<link>https://isotoma.com/blog</link>
	<description>Bespoke software development in Python and Django</description>
	<lastBuildDate>Tue, 19 Apr 2022 13:39:33 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=5.8.8</generator>
	<item>
		<title>Six Rs of cloud migration: The Isotoma approach</title>
		<link>https://isotoma.com/blog/2021/12/16/six-rs-of-cloud-migration-the-isotoma-approach/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Thu, 16 Dec 2021 11:07:45 +0000</pubDate>
				<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3353</guid>

					<description><![CDATA[When it comes to mapping out your cloud migration strategy, it can be difficult to know where to start. The [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">When it comes to mapping out your cloud migration strategy, it can be difficult to know where to start. The process will depend in a large part on the type and complexity of the applications you wish to move. So how do you begin?</span></p>
<p><span style="font-weight: 400">The six Rs of cloud migration is a good place to start. It refers to six different approaches to getting an application to the cloud, and while it won&#8217;t necessarily be the case that you should treat the list as a menu to pick and choose from, it&#8217;s good practice to keep them in mind.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">You should look first at the current status of your business and your objectives. The best cloud-migration approach for you will be the one that not only solves a problem but prepares you for the future. </span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">At Isotoma, two of the six (replatforming and rearchitecting) form the foundation for our approach to cloud migration and deliver the outcomes we want to achieve for our clients.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">To provide a clear context for these two approaches, first, we&#8217;ll explain what the other four Rs of replatforming mean.</span></p>
<p><b>Rehost</b></p>
<p><span style="font-weight: 400">Rehosting is basically a ‘lift and shift’ approach. You’re moving your application from an on-premise environment to the cloud without making any modifications to it.</span></p>
<p><b>Repurchase</b></p>
<p><span style="font-weight: 400">Rather than moving your application to the cloud, here you’re looking for an existing cloud-based or SaaS equivalent. Repurchasing means you decommission your on-premises application and replace it with a cloud-based version.</span></p>
<p><b>Retire</b></p>
<p><span style="font-weight: 400">In the context of your ongoing application development, you may decide that your current on-premise application is no longer fit for purpose. Either it’s too clunky or inefficient for cloud migration or it’s doing things you no longer need.</span></p>
<p><span style="font-weight: 400">Therefore you could decide to decommission these applications or consolidate their functions with others.</span></p>
<p><b>Retain</b></p>
<p><span style="font-weight: 400">If you’re heavily invested in your on-premise application and you&#8217;re in the middle of working on a project, it may make sense to retain your current application rather than migrate it.</span></p>
<p><b>Replatforming and rearchitecting: The Isotoma approach</b></p>
<p><span style="font-weight: 400">We mentioned earlier that the Isotoma approach focuses on two of the six Rs: replatforming and rearchitecting. These two categories are closely related and make the most of Isotoma’s unique mix of development and operational experience.</span></p>
<p><span style="font-weight: 400">In replatforming, we move an application from a data centre or on-premise to the cloud and incorporate subtle changes along the way. This optimises the application for its new cloud-based environment, irons out any kinks and makes it more stable and scalable.</span></p>
<p><span style="font-weight: 400">This highlights a frequently misunderstood aspect of cloud migration. It isn&#8217;t primarily about saving money but about adding value. By optimising your application as part of its migration, you get more bang for your buck.</span></p>
<p><span style="font-weight: 400">An example of this is AWS’s</span><a href="https://aws.amazon.com/rds/aurora/?aurora-whats-new.sort-by=item.additionalFields.postDateTime&amp;aurora-whats-new.sort-order=desc"> <span style="font-weight: 400">Aurora</span></a><span style="font-weight: 400"> system. This is a relational database built specifically for the cloud. It’s significantly faster than both standard MySQL and PostgreSQL databases. At a much cheaper cost, you get the security and reliability of a commercial database readily available. Similarly, the</span><a href="https://aws.amazon.com/s3/?did=ft_card&amp;trk=ft_card"> <span style="font-weight: 400">Amazon S3</span></a><span style="font-weight: 400"> simple cloud storage system provides advanced functionality at 11 9s of data durability. This translates as 99.99966% of stored data being defect-free.</span></p>
<p><span style="font-weight: 400">But if replatforming won’t provide the complete solution you’re looking for, then there’s always rearchitecting.</span></p>
<p><span style="font-weight: 400"> </span><b>How rearchitecting works</b></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">A business can find itself so heavily dependent on an application that jettisoning it isn&#8217;t an option.</span></p>
<p><span style="font-weight: 400">But what if this application is getting creaky, with certain characteristics that will be problematic for cloud migration?</span></p>
<p><span style="font-weight: 400">The answer is rearchitecting. This approach to cloud migration is also known as refactoring or restructuring. Essentially, it&#8217;s a reimagining of the application, like a snake shedding its skin. The objective is to transform it into something fully cloud-native that still achieves what it did before.</span></p>
<p><span style="font-weight: 400">This may mean retaining some of its current coding (perhaps using containers) but future-proofing it for the cloud. It represents a complete overhaul of the application to transition its architecture to something that’s fully cloud-functional.</span></p>
<p><span style="font-weight: 400">Rearchitecting is especially valuable and beneficial for businesses with existing applications at the core of their operations and even their entire brand purpose. What it offers is an approach to cloud migration that can encompass highly customised and dedicated applications.</span></p>
<p><b>How to choose your migration methodology</b></p>
<p><span style="font-weight: 400">It’s critical in cloud migration to understand which approach will best enable you to achieve your business objectives.</span></p>
<p><span style="font-weight: 400">This is about looking at things in the longer term. Will a relatively simple fix now stand you in good stead for expanding your customer base, for example?</span></p>
<p><span style="font-weight: 400">How dependent are you on your applications? To what degree does this tether you to an on-premises arrangement? Is this hampering your scalability and putting a ceiling on your ambitions?</span></p>
<p><span style="font-weight: 400">Our replatforming and rearchitecting migration strategies have worked across a far-reaching spectrum of industries, from </span><a href="https://isotoma.com/work/nowmusic"> <span style="font-weight: 400">music streaming</span></a><span style="font-weight: 400"> to</span><a href="https://isotoma.com/work/perspective"> <span style="font-weight: 400">pensions</span></a><span style="font-weight: 400">, the</span><a href="https://isotoma.com/work/ncvo"> <span style="font-weight: 400">voluntary sector</span></a><span style="font-weight: 400"> and point-of-sale</span><a href="https://isotoma.com/work/ecrebo"> <span style="font-weight: 400">marketing software</span></a><span style="font-weight: 400">.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">For more information about cloud migration and exploring your options, please</span><a href="https://isotoma.com/contact"> <span style="font-weight: 400">contact the Isotoma team</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Isotoma and the hidden history of development tools</title>
		<link>https://isotoma.com/blog/2021/09/30/isotoma-and-the-hidden-history-of-development-tools/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Thu, 30 Sep 2021 10:26:38 +0000</pubDate>
				<category><![CDATA[Javascript]]></category>
		<category><![CDATA[Python]]></category>
		<category><![CDATA[React]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3343</guid>

					<description><![CDATA[There are two broad narratives in the history of digital development. The first is focused on the user experience. The [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">There are two broad narratives in the history of digital development.</span></p>
<p><span style="font-weight: 400">The first is focused on the user experience. The second is arguably not as well known and concerns what goes on behind the scenes. This considers how the landscape moved from being a polarised place for developers, to today’s world where a range of accessible tools put high-level development within easy reach. </span></p>
<p><span style="font-weight: 400">For most people, the digital experience is about how they interact with devices, apps and services, and how these things have become increasingly integrated into daily life. But without the right development tools, this would never have existed.</span></p>
<h2><b>Performance vs accessibility</b><span style="font-weight: 400"> </span></h2>
<p><span style="font-weight: 400">Ironically, at one time digital developers were faced with a binary choice; performance or accessibility. </span></p>
<p><span style="font-weight: 400">By the early 2000s,</span><a href="https://www.java.com/en/"> <span style="font-weight: 400">Java</span></a><span style="font-weight: 400"> was the most prominent sophisticated development tool when compared to the entry-level PHP at the other end of the scale. Serious developers were more likely to favour the former over the latter, but it could result in an expensive and over-engineered solution to what should, in theory, be a simple problem.</span></p>
<p><span style="font-weight: 400">The middle ground was sparsely populated by a group of developers, who were doing something different — building applications with little-known but effective tools.</span></p>
<p><span style="font-weight: 400">Upon launching in 2005, Isotoma joined this rather exclusive group of specialist developers responsible for creating solutions that worked well for their customers. However, there was an unexpected catch. </span></p>
<p><span style="font-weight: 400">Customers have always tended to focus on outcomes and just want apps that function in a way that meets their individual expectations. But what happens when these same customers want to change their provider or platform? Specialist development tools have smaller communities of practitioners and are therefore more likely to tie customers in to a particular supplier. And this lack of community can be a massive hurdle when hoping to move to a new supplier. </span></p>
<p><span style="font-weight: 400">This meant that companies seeking cost-effective solutions for consumers and users were finding themselves with fewer options of their own when it came to switching providers.</span></p>
<p><span style="font-weight: 400">This specialist middle ground needed to grow if it was to become more effective.</span></p>
<h2><b>Occupying the middle ground</b></h2>
<p><span style="font-weight: 400">Isotoma’s approach has always been to focus on ‘best-in-breed&#8217; tech for development purposes. But it hasn’t always been easy.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">The original problem stemmed from the fact that these development tools, like</span><a href="https://www.python.org/dev/"> <span style="font-weight: 400">Python</span></a><span style="font-weight: 400">, were in the minority, squeezed between the more popular choices at each end (Java, .NET and PHP).</span></p>
<p><span style="font-weight: 400">Challenging the polarised nature of digital development became easier with the arrival of</span><a href="https://rubyonrails.org/"> <span style="font-weight: 400">Ruby on Rails</span></a><span style="font-weight: 400"> in 2004. This was an application framework that offered default structures for databases and web development.</span></p>
<p><span style="font-weight: 400">Two significant aspects of Ruby on Rails were that:</span><span style="font-weight: 400"> </span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">It offered a realistic alternative to Java, and</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">It provided a ladder for developers to climb up the tech stack hierarchy.</span></li>
</ul>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">It was also a catalyst for middle-ground developers using languages and frameworks like Python and</span><a href="https://www.djangoproject.com/"> <span style="font-weight: 400">Django</span></a><span style="font-weight: 400"> to refine their own tools and provide viable, accessible alternatives to developers.</span></p>
<p><span style="font-weight: 400">As early adopters of the middle-ground approach to development, Isotoma now found our instincts confirmed by a significant industry shift in the same direction.</span></p>
<h2><b>The big players move in</b></h2>
<p><span style="font-weight: 400">Inevitably, over time, the bigger developers have begun to create alternatives that have this middle-ground appeal.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">Examples include:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Facebook’s open-source JavaScript library,</span><a href="https://reactjs.org/"> <span style="font-weight: 400">React</span></a></li>
<li style="font-weight: 400"><a href="https://code.visualstudio.com/"><span style="font-weight: 400">Microsoft VS Cpde</span></a><span style="font-weight: 400">, a free, integrated development environment (IDE), and </span></li>
<li style="font-weight: 400"><a href="https://aws.amazon.com/what-is-aws/"><span style="font-weight: 400">Amazon Web Services</span></a><span style="font-weight: 400"> (AWS), an on-demand cloud-computing development platform.</span></li>
</ul>
<p><span style="font-weight: 400">With the advent of these powerful, accessible, often open-source solutions, the tech giants have created better developer mindshare and moved away from the inflexible and restricted days of the past.  </span></p>
<h2><b>TypeScript vs JavaScript</b></h2>
<p><span style="font-weight: 400">Another major legacy of this move into the middle-ground is the development of</span><a href="https://www.typescriptlang.org/"> <span style="font-weight: 400">TypeScript</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">Microsoft created Typescript as an alternative to JavaScript, in response to the growing frustration of developers working with a language many thought was not fit for purpose.  Technically, Typescript is a variant (specifically a “superset”) of JavaScript but with a particular focus on building larger, more complex applications, allowing developers to take a modular approach to development.</span></p>
<p><span style="font-weight: 400">There are various advantages to TypeScript, including its robust static typing, which helps eliminate type-related mistakes in coding. Code is also less error-prone in TypeScript with improved performance during execution.</span></p>
<p><span style="font-weight: 400">The result? Developers have become more productive. And with JavaScript virtual machines universally available on almost every device, they’ve been able to do so in the knowledge that their tools will work without compatibility issues. </span><span style="font-weight: 400"> </span></p>
<h2><b>A better development landscape for all </b></h2>
<p><span style="font-weight: 400">Ultimately, the growth of the middle ground over the last 15-20 years has delivered real benefits for both developers and their customers:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Developers have better tools and platforms that enhance and support performance</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Customers have greater transparency, more choice and cost-effective solutions.</span></li>
</ul>
<p><span style="font-weight: 400">For Isotoma, the use of TypeScript, React and AWS has allowed us to offer customers a flexible, adaptable range of solutions for developing dedicated digital products and services.</span></p>
<p><span style="font-weight: 400">It’s taken a while, but we’re pleased that the rest of the development industry has joined Isotoma in recognising the need for quality tools that are in the sweet spot between performance and accessibility.</span></p>
<p><span style="font-weight: 400">Got a project you think Isotoma could help you with? Please </span><a href="https://isotoma.com/contact"><span style="font-weight: 400">get in touch.</span></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>When to carry out a DPIA: How to minimise risk, control your data, and be GDPR compliant</title>
		<link>https://isotoma.com/blog/2021/07/08/when-to-carry-out-a-dpia-how-to-minimise-risk-control-your-data-and-be-gdpr-compliant/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Thu, 08 Jul 2021 10:20:38 +0000</pubDate>
				<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3335</guid>

					<description><![CDATA[GDPR should, by now, be familiar to most organisations, but the concept of a Data Protection Impact Assessment (DPIA) is [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">GDPR should, by now, be familiar to most organisations, but the concept of a Data Protection Impact Assessment (DPIA) is much less well-known. However, if you want to be sure your organisation is GDPR compliant then you will need to carry out a DPIA.</span></p>
<p><span style="font-weight: 400">In the following, we’ll explain what a DPIA is, and why it’s so critical in helping you stay on the right side of GDPR.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400"> </span></p>
<p><b>GDPR and the fear factor</b></p>
<p><span style="font-weight: 400">Compliance isn’t easy. The</span><a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/"> <span style="font-weight: 400">General Data Protection Regulation</span></a><span style="font-weight: 400"> (GDPR) was designed to standardise data protection law and protect people’s privacy, but many organisations have been</span><a href="https://www.itgovernance.co.uk/blog/organisations-struggling-to-meet-gdpr-requirements-with-poor-planning-and-lack-of-awareness-to-blame"> <span style="font-weight: 400">struggling to meet its requirements</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">A</span><span style="font-weight: 400"> major area of difficulty is in implementing the necessary measures to be GDPR compliant. Nevertheless, this is something organisations must overcome if they wish to avoid facing the consequences of non-compliance.</span></p>
<p><span style="font-weight: 400">The key tool to help them do this is the data protection impact assessment or DPIA. The DPIA hasn&#8217;t made the headlines in the same way as GDPR, but it is central to good data control and risk management.</span></p>
<p><span style="font-weight: 400">There&#8217;s a certain fear factor that comes with GDPR. This is because its most publicised aspect is the</span><a href="https://gdpr.eu/fines/"> <span style="font-weight: 400">fines</span></a><span style="font-weight: 400"> non-compliance attracts, which can be up to 5% of an an organisation’s global turnover!:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Google was fined £43 million in 2019</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">H&amp;M faced a £32 million fine in 2020</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Telecom Italia was fined £24 million in 2020</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">As was British Airways in the same year, for £20 million, and</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Marriott Hotels, for £18 million.</span></li>
</ul>
<p><span style="font-weight: 400">Obviously, these are the big-hitting headlines, but the fines for non-GDPR compliance can be significant whatever size your company is. </span></p>
<p><span style="font-weight: 400">While these fines are a necessary part of the compliance regime, they add to the pressure organisations face in controlling their data, and gaining the necessary confidence to manage it knowing that they’re complying with requirements.</span></p>
<p><b> </b></p>
<p><b>Does GDPR still apply post-Brexit?</b></p>
<p><span style="font-weight: 400">Brexit has added to uncertainties over GDPR. You might be uncertain whether it still applies, for example.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">The answer is complex: it doesn’t, but it does. Legally, GDPR no longer applies to the UK, because it’s an EU regulation. However, if you operate inside the UK, you will still need to comply with data protection law, which currently matches GDPR word for word. </span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">Therefore, in practice, you must still be GDPR-compliant.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400"> </span></p>
<p><b>What does GDPR say about data?</b></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">The type of data at the heart of GDPR is personal data. Some of this is obvious, such as a person’s name, location, or username. But it can also include things such as IP addresses and cookie identifiers.</span></p>
<p><span style="font-weight: 400">Personal data is data that allows someone to be identified. The key issues that GDPR, and UK data protection law, address are:</span><span style="font-weight: 400"> </span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Using personal data, and</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Storing it.</span></li>
</ul>
<p><span style="font-weight: 400">The</span><a href="https://ico.org.uk/"> <span style="font-weight: 400">Information Commissioner’s Office (ICO)</span></a><span style="font-weight: 400"> is the independent organisation authority that upholds information rights in the public interest. It says:</span></p>
<p><i><span style="font-weight: 400">You should identify the minimum amount of personal data you need to fulfil your purpose.</span></i></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">Therefore, an organisation should only hold this amount of information and no more.</span></p>
<p><span style="font-weight: 400">Organisations shouldn’t overreach when it comes to collecting data about people, and they must protect this data from unauthorised or unlawful processing.</span></p>
<p><span style="font-weight: 400">This is where the crux of much GDPR enforcement and non-compliance lies, that is how securely organisations store personal data. Therefore, they need a way to assess and demonstrate their approaches, processes, and methods for this.</span></p>
<p><span style="font-weight: 400">This is where a DPIA comes in.</span></p>
<p><b> </b></p>
<p><b>What is a DPIA?</b></p>
<p><span style="font-weight: 400">A data protection impact assessment (DPIA) is a process that systematically analyses, identifies, and minimises your data protection risk.</span></p>
<p><span style="font-weight: 400">Whilst it doesn’t eliminate or minimise it, a DPIA helps you understand your risk. </span></p>
<p><span style="font-weight: 400">Under GDPR, undertaking a DPIA is therefore a key part of your accountability.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">ICO sets nine criteria, and if you trigger any two of them, you should then carry out a DPIA. These criteria apply to what ICO calls</span><a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/data-protection-impact-assessments-dpias/examples-of-processing-likely-to-result-in-high-risk/"> <span style="font-weight: 400">high-risk processing</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">The nine criteria are:</span></p>
<ol>
<li><span style="font-weight: 400">Evaluation or scoring of data</span></li>
<li><span style="font-weight: 400">Automated decision making, with legal or similar effects</span></li>
<li><span style="font-weight: 400">Systematic monitoring</span></li>
<li><span style="font-weight: 400">Data that is sensitive or of a highly personal nature</span></li>
<li><span style="font-weight: 400">Large-scale data processing</span></li>
<li><span style="font-weight: 400">Matching or combining datasets</span></li>
<li><span style="font-weight: 400">Data on vulnerable data subjects</span></li>
<li><span style="font-weight: 400">Innovative applications or applying new technological or organisational solutions</span></li>
<li><span style="font-weight: 400">Preventing data subjects from exercising a right, or using a contract or service.</span></li>
</ol>
<p><span style="font-weight: 400">Generally, a combination of any two of these criteria applied to your data collection, processing and storage activities, will mean that you need to undertake a DPIA.</span></p>
<p>&nbsp;</p>
<p><b>What does a DPIA involve?</b></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">Managing data is complex, and consequently carrying out a DPIA can be complex too.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">The key elements in the DPIA process are:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Describing the processing operation and its purpose</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Assessing the necessity and proportionality of the processing – whether it meets the minimum amount that ICO recommends</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Assessing the risks to the rights of your data subjects, including risks to both privacy and data protection rights</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Deciding what measures you can implement to mitigate these risks.</span></li>
</ul>
<p><span style="font-weight: 400">There isn’t a prescribed way of carrying out a DPIA, but it will need to be both diligent and comprehensive to meet ICO requirements.</span></p>
<p>&nbsp;</p>
<p><b>What are the benefits of a DPIA?</b><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">The DPIA is a practical tool to help you understand the personal data you hold, a way to understand the risks of holding and processing that data, and a way of ensuring that you have thought about all aspects of that data.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">If the worst were to happen and you suffered a breach, you would have to disclose it to ICO. You’ll need to show a clear decision-making trail regarding your data management. By having the results of a DPIA to hand, you can demonstrate this to ICO.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">More than this, however, the DPIA is a valuable discovery process for all companies involved in collecting, processing and storing personal data. It should be a fundamental pillar of your business, because, ultimately, it can better protect your interests and those of your customers.</span><b> </b></p>
<p>&nbsp;</p>
<p><b>The Isotoma approach to DPIAs</b></p>
<p><span style="font-weight: 400">With our</span><a href="https://www.iso.org/isoiec-27001-information-security.html"> <span style="font-weight: 400">ISO 27001</span></a><span style="font-weight: 400"> certification for information security management, we will routinely but diligently conduct DPIAs for all our clients, providing you with a systematic framework to help ensure your data compliance.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">For more details, please</span><a href="https://isotoma.com/contact"> <span style="font-weight: 400">contact the Isotoma team</span></a><span style="font-weight: 400"> today.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Dependencies and data breaches: How to keep your application safe</title>
		<link>https://isotoma.com/blog/2021/06/03/dependencies-and-data-breaches-how-to-keep-your-application-safe/</link>
					<comments>https://isotoma.com/blog/2021/06/03/dependencies-and-data-breaches-how-to-keep-your-application-safe/#comments</comments>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Thu, 03 Jun 2021 07:58:06 +0000</pubDate>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Data breaches]]></category>
		<category><![CDATA[Dependencies]]></category>
		<category><![CDATA[Software supply chain]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3331</guid>

					<description><![CDATA[For cybercriminals software dependencies are a gift that keeps giving.  We know that data breaches can be costly for companies [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">For cybercriminals software dependencies are a gift that keeps giving. </span></p>
<p><span style="font-weight: 400">We know that data breaches can be costly for companies in both financial and reputational terms, but did you know that many of these breaches are due to developers introducing risks into their own code?</span></p>
<p><span style="font-weight: 400">There&#8217;s plenty of guidance about best practice in data security for businesses and organisations, but much of this tends to focus on anti-malware, user privileges and system monitoring.</span></p>
<p><span style="font-weight: 400">The issue with dependencies is that when they expose businesses to greater risk this is all happening at a more technical level. The impact can be significant and extremely damaging, but can be all but invisible to senior management.</span></p>
<p><span style="font-weight: 400">Effective dependency management is, therefore, an essential component in protecting yourself from data breaches.</span></p>
<p><span style="font-weight: 400"> </span></p>
<p><b>Dependencies and Data Breaches</b><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">In the month of March 2021 alone there were breaches to </span><a href="https://www.itgovernance.co.uk/blog/list-of-data-breaches-and-cyber-attacks-in-march-2021"><span style="font-weight: 400">21 million records</span></a><span style="font-weight: 400"> around the world.</span></p>
<p><span style="font-weight: 400">Closer to home, the UK is experiencing a fraud epidemic according to a</span><a href="https://rusi.org/publication/occasional-papers/silent-threat-impact-fraud-uk-national-security"> <span style="font-weight: 400">report</span></a><span style="font-weight: 400"> from The Royal United Services Institute (RUSI). Much of this fraud is opportunistic and, in many cases, the applications that organisations use are enabling it.</span><span style="font-weight: 400"> </span></p>
<p><a href="https://owasp.org/"><span style="font-weight: 400">OWASP</span></a><span style="font-weight: 400"> (the Open Web Application Security Project) publishes a regular top 10 index of web app security vulnerabilities. These are the vulnerabilities hackers exploit to breach organisations, and many of them are introduced through software dependencies.</span></p>
<p><span style="font-weight: 400">Using components with known vulnerabilities was the root cause of the infamous</span><a href="https://panamapapers.sueddeutsche.de/articles/56febff0a1bb8d3c3495adf4/"> <span style="font-weight: 400">Panama Papers</span></a><span style="font-weight: 400"> breach in 2016. This involved 11.5 million leaked documents.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">In the same year, Canadian company</span><a href="https://securityaffairs.co/wordpress/48404/deep-web/verticalscope-data-breach.html"> <span style="font-weight: 400">VerticalScope</span></a><span style="font-weight: 400"> suffered a breach where over 45 million passwords were leaked from 1,000 sites. The root cause was the same.</span></p>
<p><span style="font-weight: 400">Another high-profile breach involved the American credit bureau</span><a href="https://www.ftc.gov/enforcement/cases-proceedings/refunds/equifax-data-breach-settlement"> <span style="font-weight: 400">Equifax</span></a><span style="font-weight: 400"> in 2017. Here the breach exposed the data of 147 million people. The company had to agree on a settlement of $425 million with the Federal Trade Commission to help those affected. Here, the main cause of the breach was through third-party software for which the company had not updated a crucial security patch.</span></p>
<p><span style="font-weight: 400">The</span><a href="https://www.forbes.com/sites/thomasbrewster/2017/03/01/cloudbleed-leak-massive-but-not-too-harmful/"> <span style="font-weight: 400">CloudBleed</span></a><span style="font-weight: 400"> bug of 2017 caused 1.2 million leaks of memory from web servers, from the introduction of a vulnerable code. And the</span><a href="https://www.infosecurity-magazine.com/news/marriott-fined-184m-over-data/#:~:text=In%20November%202018%2C%20Marriott%20reported,Hotels%20and%20Resorts%20Worldwide%20Inc."> <span style="font-weight: 400">Marriott data breach</span></a><span style="font-weight: 400"> of 2018 exposed around 339 million global guest records. The ICO fined the hotel company £99 million.</span></p>
<p><span style="font-weight: 400">In</span><span style="font-weight: 400"> April 2021, security researchers at </span><a href="https://blog.sonarsource.com/php-supply-chain-attack-on-composer"><span style="font-weight: 400">SonarSource</span></a><span style="font-weight: 400"> identified a vulnerability in the source code of Composer, a PHP tool used to manage and install software dependencies. The vulnerability allowed the researchers to execute commands in Packagist, an online service which Composer uses to determine the correct supply chain for package downloads. The vulnerability was identified and patched without being exploited (to Packagist’s knowledge), but the fact that this was a major tool used to manage dependencies highlights the inherent risks in software supply chains. </span></p>
<p><span style="font-weight: 400"> </span></p>
<p><b>What Happens When Developers Introduce Risk?</b><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">Software development is a high-pressure business, and to keep up with demand it&#8217;s common for developers to reuse software written by other people.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">This reuse takes the form of software dependencies — additional code that the programmer includes to help avoid repeating key processes such as designing, writing, testing and debugging specific units of code.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">These units are known as packages, libraries or modules.</span></p>
<p><span style="font-weight: 400">The practice of taking on these external dependencies is well-established. But it has a built-in weakness. By bringing in this external code the developer has no guarantee of its history, the work that may or may not have gone into it, or the extent to which it has been tested.</span></p>
<p><span style="font-weight: 400">In many areas of business, such as food and fashion, the concept of</span><a href="http://www.uprovenance.com/what-is-provenance/"> <span style="font-weight: 400">provenance</span></a><span style="font-weight: 400"> plays a hugely significant part. Where a product or material comes from is important in determining its intrinsic value or reliability.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400">Provenance is what&#8217;s missing in the use of dependencies. The software supply chain can become quite obscure when developers build apps.</span></p>
<p><span style="font-weight: 400">A developer may link an app to a specific version of underlying software they&#8217;ve used, but because this is hidden it fails to get updated in the same way the app itself does. Any vulnerabilities remain unaddressed, leaving potential gaps for cybercriminals to exploit.</span><span style="font-weight: 400"> </span></p>
<p><span style="font-weight: 400"> </span></p>
<p><b>How Should You Manage Dependencies?</b></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">The government publishes</span><a href="https://www.gov.uk/service-manual/technology/managing-software-dependencies"> <span style="font-weight: 400">guidance</span></a><span style="font-weight: 400"> for managing software dependencies. It emphasises the importance of keeping code up to date, your system secure and making sure your software is working the way you expect it to.</span></p>
<p><span style="font-weight: 400">Essentially, this is a management task, and it can be an extensive one. You should track dependencies and their different versions and be systematic about ensuring you protect them from vulnerabilities.</span></p>
<p><span style="font-weight: 400">The main ways for applying this dependency management are through code, firewall apps and containerisation.</span></p>
<p><span style="font-weight: 400"> </span><span style="font-weight: 400">But you can also take advantage of specialist tools. At Isotoma, we&#8217;ve developed a dedicated security and compliance product that works to control the risk of data breaches.</span></p>
<p><span style="font-weight: 400">This takes the pain out of dependency management while giving you peace of mind about what&#8217;s going on behind the scenes with your software.</span></p>
<p><span style="font-weight: 400">Want to find out more?</span><a href="https://isotoma.com/contact"> <span style="font-weight: 400">Contact the Isotoma team today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
					<wfw:commentRss>https://isotoma.com/blog/2021/06/03/dependencies-and-data-breaches-how-to-keep-your-application-safe/feed/</wfw:commentRss>
			<slash:comments>1</slash:comments>
		
		
			</item>
		<item>
		<title>Purpose-Built Software Demonstrating Curricula Compliance</title>
		<link>https://isotoma.com/blog/2021/03/16/purpose-built-software-demonstrating-curricula-compliance/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Tue, 16 Mar 2021 09:00:31 +0000</pubDate>
				<category><![CDATA[Better Results]]></category>
		<category><![CDATA[Software engineering]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3215</guid>

					<description><![CDATA[In 2010, the government announced that universities in England would be permitted to charge tuition fees of up to £9,000 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">In 2010, the government announced that universities in England would be permitted to charge tuition fees of up to £9,000 per year. The implementation of this ruling in 2012 sparked a period of broad commercialisation that has challenged the way universities operate. No longer can they perceive themselves to be solely public bodies; instead, they must adopt a business mindset as a service provider with students as their customers.</span></p>
<p><span style="font-weight: 400">As the higher education sector began to grow into a commercialised field, the government introduced the Teaching Excellence Framework (TEF) in 2017, following a recommendation from the Competition &amp; Markets Authority. A key aim of the TEF is to act as a resource for students to judge the teaching quality of the universities they are interested in applying for. The TEF therefore requires universities to actively demonstrate the quality of their teaching, learning environment, and student outcomes in order to attain a ‘gold’ rating.</span></p>
<p><span style="font-weight: 400">This has left universities in desperate need of a system that shows assessors they deliver a comprehensive curriculum that provides students with the breadth and depth of knowledge they need to succeed in their chosen feed. They need traceability, proveability, and evidence of well-thought-out curricula.</span></p>
<p><span style="font-weight: 400">They need a purpose-built solution.</span></p>
<h2><b>Demonstrating Comprehensive Curricula</b></h2>
<p><span style="font-weight: 400">Over the course of multiple years, universities must deliver diverse, all-encompassing curricula that give students the depth of knowledge they need to succeed in their future careers. And now, to reach the ‘gold’ TEF rating, they also need to prove it.</span></p>
<p><span style="font-weight: 400">People outside the education sphere may not understand what truly goes into establishing each university programme of study. Here’s a list of some of the things they have to consider:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Is everything students need to know covered?</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">How do we adjust the curriculum for each year group?</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">How do we make changes to refine the curriculum in future?</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Can students understand how different facets of their learning link together?</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Does the curriculum allow for students to study and build their knowledge in their own time?</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Can we demonstrate to external bodies that the curriculum is all-encompassing?</span></li>
</ul>
<p><span style="font-weight: 400">These are just some of the questions that universities must get to grips with when designing, constructing, and offering a programme of study. They pose a challenge faced by universities for many years; one that results in senior leaders investing a wealth of time, effort, and resources. With the additional pressure of demonstrating that the curriculum represents an excellent learning experience for students in order to impress TEF assessors, the task has become even more difficult.</span></p>
<p><span style="font-weight: 400">Rather than adapting old processes, or addressing each requirement separately, establishing a bespoke solution that satisfies both challenges would be invaluable for universities.</span></p>
<p><span style="font-weight: 400">That’s where Isotoma stepped in.</span></p>
<h2><b>Sofia: A Modern Solution to a Challenging Problem</b></h2>
<p><span style="font-weight: 400">Working with Imperial College London’s School of Medicine, Isotoma embarked on an ambitious project that would change the education of aspiring doctors at one of the UK’s most reputable universities.</span></p>
<p><span style="font-weight: 400">The Imperial College School of Medicine medical degree, like any delivered in the UK, is regulated by the General Medical Council (GMC). They require medical schools to demonstrate that their graduates are fit to practise. To do this, Imperial College has to prove every aspect of their curriculum is taught in line with the national medical curriculum. You can imagine the difficulty of showcasing that proof using an endless series of files and paper documents.</span></p>
<p><span style="font-weight: 400">The solution Isotoma delivered was an interactive curriculum mapping tool that spanned the length and breadth of Imperial College’s medical curriculum. It provides staff, students, and the GMC with a clear, comprehensive visualisation of the curriculum. Sofia demonstrates how lectures, practicals, tutorials, and homework link together, how each skill learned relates to another, and how studying the entire curriculum makes students fit to practise.</span></p>
<p><span style="font-weight: 400">Following the success of Sofia’s application to Imperial College School of Medicine’s requirements, a number of other universities have decided that Sofia is right for them. In fact, we’re already in the process of rolling Sofia out to the medical schools of Swansea University and University of East Anglia, and to the veterinary school of University College Dublin.</span></p>
<h2><b>Find Out How Sofia Can Work for You</b></h2>
<p><span style="font-weight: 400">Although the first version of Sofia was designed for a medical curriculum, it has been comprehensively updated so that it can be tailored to accommodate any curriculum — no matter how simple or complex.</span></p>
<p><span style="font-weight: 400">So, whether you are faced with regular inspection from an external body, or you want to achieve the ‘gold’ TEF rating, Sofia provides the platform you need to demonstrate the quality and diversity of your curriculum.</span></p>
<p><span style="font-weight: 400">If you’d like to find out how a bespoke curriculum mapping tool can make your life easier, </span><a href="http://bit.ly/36SEOn1"><span style="font-weight: 400">visit the Sofia website now</span></a><span style="font-weight: 400">.</span></p>
<h2><b>Building Education Solutions</b></h2>
<p><span style="font-weight: 400">At Isotoma, we were delighted to take on this challenge and expand upon our extensive experience and expertise in the education sector.</span></p>
<p><span style="font-weight: 400">Through our previous work, we have seen first-hand the benefits tailored solutions such as Sofia provide to people and organisations in the world of education, and we are passionate about continuing to design and build them.</span></p>
<p>Since this blog was written in January 2020 we&#8217;ve successfully rolled out Sofia at Swansea University Medical School, University of East Anglia Norwich Medical School, and University College Dublin School of Veterinary Medicine. But the impact of COVID-19 has demonstrated the importance of effective digital solutions to educational organisations across the board. This has led to conversations with organisations in both the UK and Australia focusing on primary and secondary education, as well as other areas of higher education with complex curriculum mapping needs such as dentistry.</p>
<p><span style="font-weight: 400">If you’re in the education sector and think a bespoke solution would resolve your biggest problems, we’d love to help, so </span><a href="http://bit.ly/38mHtGu"><span style="font-weight: 400">get in touch with the Isotoma team today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>The Benefits of a Software-First Approach</title>
		<link>https://isotoma.com/blog/2021/03/04/the-benefits-of-a-software-first-approach/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Thu, 04 Mar 2021 09:24:37 +0000</pubDate>
				<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3322</guid>

					<description><![CDATA[When you’re choosing a partner to help migrate your applications and data to the cloud you want to be sure [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">When you’re choosing a partner to help migrate your applications and data to the cloud you want to be sure they have the right expertise for the job. </span></p>
<p><span style="font-weight: 400">Most migration partners will demonstrate their experience with great case studies to convince you they’re the team to choose. And there’s no reason why an agency with a strong resumé and considerable cloud experience wouldn’t be able to do the job. In fact, there’s a good change that they’d do a great job. But that’s not how we look at things.</span></p>
<p><span style="font-weight: 400">Unlike many cloud migration experts and AWS Consulting Partners we have a background in software, not IT operations. Whereas many organisations approach migrations as an ops challenge we think they’re software projects.</span></p>
<p><span style="font-weight: 400">And that gives us a few advantages.</span></p>
<p>&nbsp;</p>
<h2><b>Better Understand Your Requirements</b></h2>
<p><span style="font-weight: 400">Because we’re developers at heart we’re able to intimately understand the requirements of your applications. We’re also well aware that you may, at first, be hesitant to transition from a traditional server infrastructure to a cloud-based solution. </span></p>
<p><span style="font-weight: 400">With this understanding we’re able to explain the exact benefits you’ll experience by moving to the cloud, and can create an infrastructure that meets the specific needs of your software.</span></p>
<p>&nbsp;</p>
<h2><b>Creating Bespoke Solutions</b></h2>
<p><span style="font-weight: 400">With our software-first approach to migrations we’re going to build the cloud architecture and migration tooling that satisfies your requirements and allows you to get the best from AWS. If you need an unusual infrastructure or your data migrations are a bit hairy, our developers are the right team to create, test, and implement a bespoke solution.</span></p>
<p>&nbsp;</p>
<h2><b>Identifying and Mitigating Potential Issues</b></h2>
<p><span style="font-weight: 400">Unlike companies with a background in IT operations we approach cloud migration services as a software-based challenge. This perspective allows us to identify and mitigate potential issues before they materialise. So rather than discovering problems after the migration is complete we’re able to counteract them during the process.</span></p>
<p>&nbsp;</p>
<h2><b>Using Software Expertise to Help Ecrebo</b></h2>
<p><span style="font-weight: 400">In 2018, Ecrebo, a provider of point-of-sale marketing software for major retailers, faced a considerable challenge: moving a huge amount of data from their co-located servers to the cloud. As an AWS Advanced Consulting Partner, Isotoma was one of a number of partners that Amazon recommended to Ecrebo and, because of our collaborative, consultative approach, </span><a href="https://isotoma.com/work/ecrebo?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=The%20Benefits%20of%20a%20Software-First%20Approach"><span style="font-weight: 400">we were their first choice</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">Not many AWS Consulting Partners have a background in software; they’re usually involved in IT operations. As software experts we understood exactly what Ecrebo’s unique case needed — a bespoke solution. The Isotoma team had the expertise to develop the migration tooling that supported their mountain of data and the architecture that could strengthen their application.</span></p>
<p>&nbsp;</p>
<h2><b>Choose Software Specialists</b></h2>
<p><span style="font-weight: 400">With our experience and expertise in cloud computing and our knowledge and background in software development we’re able to take on migrations of all sizes and deliver bespoke solutions.</span></p>
<p><span style="font-weight: 400">If you want to find out how our software-first approach will help your company get the most from its migration to the cloud, </span><a href="https://isotoma.com/contact/?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=The%20Benefits%20of%20a%20Software-First%20Approach"><span style="font-weight: 400">get in touch with the Isotoma team today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Improve Efficiency through Bespoke Software Tools</title>
		<link>https://isotoma.com/blog/2021/02/17/improve-efficiency-through-bespoke-software-tools/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Wed, 17 Feb 2021 10:16:31 +0000</pubDate>
				<category><![CDATA[Better Results]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3315</guid>

					<description><![CDATA[Efficiency is an important part of being a successful business.  High levels of efficiency increase productivity, reduce costs, and maximise [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">Efficiency is an important part of being a successful business. </span></p>
<p><span style="font-weight: 400">High levels of efficiency increase productivity, reduce costs, and maximise revenue. And hopefully keeps the day interesting too.</span></p>
<p><span style="font-weight: 400">Of course, every company strives to be efficient. Whether it’s streamlining processes, cutting costs, or standardising documents, there are many strategies to choose from. One that’s becoming increasingly popular is automation, and the use of software to facilitate it.</span></p>
<p><span style="font-weight: 400">With the introduction of software tools you can speed up or even eliminate tasks that your staff carry out every day, freeing them up to be even more productive. Here’s how.</span></p>
<p>&nbsp;</p>
<h2><b>What Is Automation?</b></h2>
<p><span style="font-weight: 400">Automation is the use of technology to complete a task, process, or procedure with minimal human involvement. It’s a strategy that’s been used on production lines for many years, and one which has proven to be effective in improving efficiency.</span></p>
<p><span style="font-weight: 400">You might think your industry isn’t suited to automation or you’re not sure if parts of your process can be automated. But, with bespoke software, even the most complicated processes can be simplified or taken off your plate completely.</span></p>
<p>&nbsp;</p>
<h2><b>The Use of Bespoke Software</b></h2>
<p><span style="font-weight: 400">The design, development, and implementation of bespoke software may sound like an arduous process, but it doesn’t have to be. Here’s how the process could look for your company:</span></p>
<ul>
<li><b>Identify the need</b></li>
</ul>
<p><span style="font-weight: 400">You’ll know that some of your workflows and parts of your processes are regularly repeated or consume a lot of your team’s time. Pinpointing the most troublesome area will result in the biggest improvements.</span></p>
<ul>
<li><b>Find the right agency</b></li>
</ul>
<p><span style="font-weight: 400">The development of a custom application is a big project for your company, so make sure you find the right agency for the job. Look for developers with a wealth of experience in software development and examples of previous bespoke applications.</span></p>
<ul>
<li><b>Consult with the agency</b></li>
</ul>
<p><span style="font-weight: 400">After choosing the agency you’ll work with their team to develop a shared understanding of the problem, your requirements, and how the problem will be solved.</span></p>
<ul>
<li><b>Be part of the build</b></li>
</ul>
<p><span style="font-weight: 400">Your input is important throughout the build process, so taking a collaborative approach ensures that happens. If you only get a chance to provide feedback at the end of the build, it could take a lot more time and money to fix.</span></p>
<ul>
<li><b>Implement the Software</b></li>
</ul>
<p><span style="font-weight: 400">With the software built you’ll be itching to see the results. First, however, you need to implement it in your processes, introduce your staff to the application, and explain how it works and how it will benefit them.</span></p>
<ul>
<li><b>Experience the Results</b></li>
</ul>
<p><span style="font-weight: 400">As the software becomes an integrated part of your process, you’ll start to see your team’s efficiency and productivity improve.</span></p>
<p>&nbsp;</p>
<h2><b>Making Quantum’s Users Even More Efficient</b></h2>
<p><span style="font-weight: 400">The original version of Quantum, Class Legal’s vital family law application, was the perfect demonstration of software improving efficiency. It allowed solicitors to complete time-consuming, court-approved legal forms in a fraction of the time it used to. When Quantum needed to be modernised </span><a href="https://isotoma.com/work/class-legal-quantum-cloud?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Improve%20Efficiency%20through%20Bespoke%20Software%20Tools"><span style="font-weight: 400">Class Legal contacted Isotoma</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">While building the new version of Quantum we added a feature that empowers its users to be even more efficient. By including version control in the new Quantum, we made it possible for solicitors to work collaboratively on forms at the same time, meaning it’s even easier for forms to be completed and submitted.</span></p>
<p>&nbsp;</p>
<h2><b>Improve Your Company’s Efficiency with Software</b></h2>
<p><span style="font-weight: 400">If you’re burdened by the same repetitive, time-consuming tasks, let the Isotoma team build your company a bespoke software solution. We’ll work with you to identify how a new application can remove the repetition from your processes and boost your efficiency.</span></p>
<p><span style="font-weight: 400">Start your journey to a more efficient workflow — </span><a href="https://isotoma.com/contact/?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Improve%20Efficiency%20through%20Bespoke%20Software%20Tools"><span style="font-weight: 400">contact Isotoma today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Collaboration Makes for Successful Migrations</title>
		<link>https://isotoma.com/blog/2021/02/03/collaboration-makes-for-successful-migrations/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Wed, 03 Feb 2021 16:19:38 +0000</pubDate>
				<category><![CDATA[Better Results]]></category>
		<category><![CDATA[Cloud]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3310</guid>

					<description><![CDATA[The migration of your application to the cloud could be a turning point for your company. As you leave the [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">The migration of your application to the cloud could be a turning point for your company. As you leave the server room behind and no longer have to shoulder hosting responsibilities you have more time to concentrate on your products’ roadmap.</span></p>
<p><span style="font-weight: 400">If you’re working with cloud computing experts on the migration but still have an in-house team of developers it’s important to choose a partner that understands the value of collaboration</span></p>
<p>&nbsp;</p>
<h2><b>The Problems with Resisting Collaboration</b></h2>
<p><span style="font-weight: 400">The success of your migration relies on your in-house team and the partner having the same motivation — doing what’s best for you and your software. That means working together before, during, and after the migration.</span></p>
<p><span style="font-weight: 400">Many agencies are used to working alone and some see the involvement of an in-house dev team as a nuisance. As a result they may be reluctant to collaborate with your team; instead preferring to get the migration done fast and hand the cloud infrastructure over to you.</span></p>
<p><span style="font-weight: 400">Where does that leave you? Well, it could cause a number of problems:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Your new cloud infrastructure is not suitable for your software.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Your developers may be unfamiliar with cloud architecture and thus unable to develop the software as planned.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">You are now in the cloud but don’t know how to make use of its many features and benefits.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Your developers no longer feel in control of the software.</span></li>
</ul>
<p>&nbsp;</p>
<h2><b>The Power of Collaboration</b></h2>
<p><span style="font-weight: 400">With that in mind, finding a partner that’s committed to collaborating with your in-house developers is worth its weight in gold. Here’s why.</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">They’ll begin by consulting with your in-house team during the planning process; working together to decide how best to migrate the software and host it in the cloud. After all your developers know the software better than anyone so their input in the migration is an important step to achieving a smooth and successful move.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">During the process of building the cloud infrastructure a collaborative partner will provide regular updates on progress and keep in touch with your developers.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Then, once the migration is complete, they’ll complete a handover with your team, walking them through their new architecture and explaining to you about the benefits of being in the cloud.</span></li>
</ul>
<p><span style="font-weight: 400">If you&#8217;re looking for a hassle-free life in the cloud make sure the partner you choose can provide a 24/7 managed service. That way you&#8217;ll have the peace of mind that they&#8217;re always available when you need them.</span></p>
<p>&nbsp;</p>
<h2><b>Collaborating with Sony Music</b></h2>
<p><span style="font-weight: 400">When Sony Music needed an improved cloud infrastructure for their music streaming service, NOW Music Plus, </span><a href="https://isotoma.com/work/nowmusic?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Collaboration%20Makes%20for%20Successful%20Migrations"><span style="font-weight: 400">they got in touch with Isotoma</span></a><span style="font-weight: 400">. From the beginning of the process we worked closely with NOW’s development team, including hosting daily consultations, to identify the best approach to migrating and hosting the app.</span></p>
<p><span style="font-weight: 400">We provided support to the NOW team throughout the project and launch, and continue to provide a 24/7 managed service that gives NOW ongoing support.</span></p>
<p>&nbsp;</p>
<h2><b>A Partner Committed to Your Success</b></h2>
<p><span style="font-weight: 400">Migrating to the cloud can be a simple process, when you choose the right partner, or a complicated one if you don’t. A partner that collaborates with your team and is committed to helping you achieve your goals will guide you through a smooth migration.</span></p>
<p><span style="font-weight: 400">If you’re looking to move to the cloud and you don’t want it to be a headache for you or your developers we’d love to work with you so </span><a href="https://isotoma.com/contact/?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Collaboration%20Makes%20for%20Successful%20Migrations"><span style="font-weight: 400">get in touch with the Isotoma team today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>The Keys to Building Software for Multiple Audiences</title>
		<link>https://isotoma.com/blog/2021/01/20/the-keys-to-building-software-for-multiple-audiences/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Wed, 20 Jan 2021 11:49:22 +0000</pubDate>
				<category><![CDATA[Better Results]]></category>
		<category><![CDATA[Process]]></category>
		<category><![CDATA[User experience]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3306</guid>

					<description><![CDATA[Most businesses don’t have just one audience; and that’s how they’re able to maintain a consistent stream of customers. The [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">Most businesses don’t have just one audience; and that’s how they’re able to maintain a consistent stream of customers. The challenge, however, is finding the right balance to keep everyone happy.</span></p>
<p><span style="font-weight: 400">That balancing act is never more evident than in the design and build of software that serves multiple audiences.</span></p>
<p><span style="font-weight: 400">Is it possible to develop an application that caters for the various needs of different people? The answer is yes; it’s not easy, but it’s definitely possible.</span></p>
<p>&nbsp;</p>
<h2><b>Identify Your Goals</b></h2>
<p><span style="font-weight: 400">Before you concern yourself with the different needs of your software’s audiences you must first consider your own needs. At the outset of the project decide exactly what your company wants to achieve with the software.</span></p>
<p><span style="font-weight: 400">Are you looking to better service existing customers? Increase your usership? Generate more revenue?</span></p>
<p><span style="font-weight: 400">Once you’ve decided exactly what your goals are you can start to take your audiences into consideration.</span></p>
<p>&nbsp;</p>
<h2><b>Do Your Research</b></h2>
<p><span style="font-weight: 400">You’re probably already familiar with your company’s different audiences but there’s no room for error, so research is vital.</span></p>
<p><span style="font-weight: 400">First, categorise your audiences. You can do this based on many factors but here are a few examples:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Customers or trade clients.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">How many times they’ve purchased your product.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Which industry they work in.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">How much money, on average, they commit to your company.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Demographics, such as their age, gender, or location.</span></li>
</ul>
<p><span style="font-weight: 400">Then, with your audiences defined, carry out the necessary research to understand what they want and need from your software, and how they differ from one another. You can do this through interviews, surveys, or even real user monitoring.</span></p>
<p>&nbsp;</p>
<h2><b>Prioritise the Audiences</b></h2>
<p><span style="font-weight: 400">It’s not always possible to be all things to all people and you may have to make sacrifices in some areas. To ensure they’re concessions worth making, you should prioritise your audiences and their needs.</span></p>
<p><span style="font-weight: 400">The aim is to make it possible for all your audiences to accomplish their goals. Yet, by focusing first on the most important needs of your primary audience you can cover the essentials before widening the scope of the application to provide solutions for everyone.</span></p>
<p>&nbsp;</p>
<h2><b>Sofia: Built for Staff and Students</b></h2>
<p><span style="font-weight: 400">Recently, </span><a href="https://isotoma.com/work/imperial?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=The%20Keys%20to%20Building%20Software%20for%20Multiple%20Audiences"><span style="font-weight: 400">the Isotoma team worked with Imperial College School of Medicine</span></a><span style="font-weight: 400"> on the design and build of a bespoke curriculum mapping tool called Sofia. While the need for Sofia arose from a need for Imperial to demonstrate that their curriculum met the General Medical Council standards we saw an opportunity.</span></p>
<p><span style="font-weight: 400">Sofia would not just be used by staff at Imperial, but also the university’s medical students. During the build we made Sofia into a two-way street, providing staff and students with different access points and functionality.</span></p>
<p><span style="font-weight: 400">Now Sofia has been rolled out across all six years of Imperial’s medical course and has proved popular with staff and students alike; the payoff for taking the time to understand the needs of Sofia’s two audiences.</span></p>
<p>&nbsp;</p>
<h2><b>Satisfy Your Audiences</b></h2>
<p><span style="font-weight: 400">Pleasing everyone is not easy but it can be done. If you need a new application that has to satisfy the needs of multiple audiences we’d like to help you build it.</span></p>
<p><span style="font-weight: 400">To discover how the Isotoma team will bring your vision to life, </span><a href="https://isotoma.com/contact/?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=The%20Keys%20to%20Building%20Software%20for%20Multiple%20Audiences"><span style="font-weight: 400">get in touch with us today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Why Future Proofing Your Systems Is a Must</title>
		<link>https://isotoma.com/blog/2020/12/09/why-future-proofing-your-systems-is-a-must/</link>
		
		<dc:creator><![CDATA[Isotoma Team]]></dc:creator>
		<pubDate>Wed, 09 Dec 2020 10:07:47 +0000</pubDate>
				<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://isotoma.com/blog/?p=3303</guid>

					<description><![CDATA[The world of software is constantly evolving. With regular progress being made in hosting, storage, and general technology it doesn’t [&#8230;]]]></description>
										<content:encoded><![CDATA[<p><span style="font-weight: 400">The world of software is constantly evolving. With regular progress being made in hosting, storage, and general technology it doesn’t take long for rigid applications to become outdated.</span></p>
<p><span style="font-weight: 400">One moment your program is the fastest and most suitable on the market. The next your users are abandoning you for the latest big thing, which is making your software seem slow and cumbersome.</span></p>
<p><span style="font-weight: 400">Central to ensuring the longevity and long-lasting success of your software is future proofing it. But what exactly does that mean? And how do you do it?</span></p>
<h2><b>What Is Future Proofing?</b></h2>
<p><span style="font-weight: 400">In the simplest terms the phrase “future proofing” means to minimise the negative impact that future events have on something — in this case, your software. </span></p>
<p><span style="font-weight: 400">The aim of future proofing an application is to maintain its relevance, usefulness, and financial viability even as developments are made and rival products are released.</span></p>
<h2><b>Why Is It Important?</b></h2>
<p><span style="font-weight: 400">If your software is built with solely the present in mind it will soon become outdated and, eventually, obsolete. It may start life as a huge success, but an inability to adapt will cause users to adopt newer, more relevant systems instead.</span></p>
<p><span style="font-weight: 400">In contrast, however, if your application is future proofed you have the ability to make adjustments and keep up with your competitors.</span></p>
<p><span style="font-weight: 400">In ever-changing industries future proofing is often the difference between a short-term success and long-term market dominance.</span></p>
<h2><b>Is Future Proofing Viable?</b></h2>
<p><span style="font-weight: 400">Absolutely!</span></p>
<p><span style="font-weight: 400">It would be easy to think future proofing means predicting the future, and you’d be right to say that’s not an entirely viable strategy. While there is an element of prediction involved, that’s not all there is to it.</span></p>
<p><span style="font-weight: 400">In fact future proofing is just as much about what you don’t do as what you do do.</span></p>
<h2><b>How Do I Future Proof My Software?</b></h2>
<h3><b>Make It Modifiable</b></h3>
<p><span style="font-weight: 400">At the centre of the plans for your software should be the ability to make regular, sometimes significant changes in a relatively short period of time.</span></p>
<p><span style="font-weight: 400">As the landscape of your industry evolves, it’s essential that your software is able to keep up. If it’s not, you’ll soon be surpassed by new software, or your existing competitors whose applications are able to adapt. Periodic changes will enable your software to move with the times.</span></p>
<h3><b>Analyse Industry Trends</b></h3>
<p><span style="font-weight: 400">You’ll know better than most the direction your industry is taking and you’ve probably already identified areas which you believe will change.</span></p>
<p><span style="font-weight: 400">Bear them in mind when working with developers. This level of insight will be invaluable in helping them prepare your software for what’s up ahead.</span></p>
<h3><b>Minimise Feature Overlap</b></h3>
<p><span style="font-weight: 400">When the features of an application are heavily reliant upon one another it makes changes extremely difficult; even a small alteration can cause another feature to fail, meaning every adjustment requires considerable development work.</span></p>
<p><span style="font-weight: 400">By siloing as many features as possible you maintain the freedom to update and adapt your software with minimum cost and effort.</span></p>
<h2><b>Protecting Quantum for Years to Come</b></h2>
<p><span style="font-weight: 400">Few industries are quite as changeable as the legal sector. Quantum, Class Legal’s vital industry tool, found itself under pressure as regular changes to legal forms meant it was often outdated. So, to modernise and future proof Quantum, </span><a href="https://isotoma.com/work/class-legal-quantum-cloud?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Why%20Future-Proofing%20Your%20Systems%20Is%20a%20Must"><span style="font-weight: 400">Class Legal got in touch with the Isotoma team</span></a><span style="font-weight: 400">.</span></p>
<p><span style="font-weight: 400">While adding new features to Quantum, and converting it from a desktop app into a web-based program, we increased the software’s ability to be modified quickly. As a result, it was protected against the damage caused by constant changes.</span></p>
<h2><b>Improve Your Software’s Longevity</b></h2>
<p><span style="font-weight: 400">Whether your existing software is starting to become outdated, or you’re building a new application and want to preserve its relevance for years to come, we’d love to be involved.</span></p>
<p><span style="font-weight: 400">To start future proofing your software, </span><a href="https://isotoma.com/contact/?utm_source=blog&amp;utm_medium=blog&amp;utm_campaign=Why%20Future-Proofing%20Your%20Systems%20Is%20a%20Must"><span style="font-weight: 400">get in touch with the Isotoma team today</span></a><span style="font-weight: 400">.</span></p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
