Steven Bronsveld
About us
The Launch: our office on campus
Our office is at The Launch, the pre-incubator on the Heyendaal Campus in Nijmegen. Why a startup community on a university campus suits us so well.
Read moreINSIGHTS FROM PRACTICE
Blog
Ideas, lessons and updates from our work on complex software.
Steven Bronsveld
Information security
Secret management: a register without values and fixed moments to replace them
How we create, track and replace secrets, and why our register holds everything about a secret except the secret itself.
Read more
Steven Bronsveld
Information security
Configuration management: one source per setting, versions per server and a rollback plan
How we version server settings, track which version runs where and only change production configuration during a release.
Read more
Steven Bronsveld
Information security
Governance: roles, meetings and capacity in a small team
How clear roles, recurring meetings and HR rhythm help us keep working carefully.
Read more
Wouter Damen
Information security
The Bronsprinter: office incident tickets on paper
A physical slip for every support ticket: visible, immediate and outside the sprint.
Read more
Wouter Damen
Information security
Risk management: describing risks clearly, assessing them and giving each an owner
How we capture a risk in one sentence, split it where needed and deliberately choose what to do about each one.
Read more
Wouter Damen
Information security
Access management: one identity per person and a review round every quarter
How access is granted here, how it moves with someone's role, how it disappears again, and why we recount it every quarter.
Read more
Steven Bronsveld
Uncategorised
From status logic to types
How TypeScript types help rule out invalid status transitions during development.
Read more
Steven Bronsveld
Information security
Business continuity: an impact analysis per service and a playbook for when something fails
What a business impact analysis is, how we record it per asset, and the steps we follow when a critical service goes down.
Read more
Steven Bronsveld
Information security
Change management: our release procedure from acceptance test to go/no-go moment
How a change is assessed, reviewed, tested and released at Bronscode, with separated environments and a joint go/no-go moment.
Read more
Steven Bronsveld
Information security
Asset management: ownership, classification and purchasing in practice
How we keep systems, data, hardware, suppliers and purchases visible and manageable.
Read more
Wouter Damen
Information security
Incident management: four levels, Zoho Desk and an office printer
How we stand ready to solve problems: classification, communication, escalation and data breaches, all handled in Zoho Desk.
Read more
Steven Bronsveld
Information security
Continual improvement: a monthly quality day, internal audits and management review
How we set aside time every month for quality and security, what we review internally each year, and how improvements end up with an owner.
Read more
Steven Bronsveld
Information security
Logging and monitoring: log lines that make sense, health checks and a fixed moment to look
How we make applications monitorable, what does and doesn't belong in a log line, and how we review logs on a regular basis.
Read more
Steven Bronsveld
Information security
Backups: how we keep your data safe
Why one copy is never enough, how we protect copies against the same mistakes as the original, and what RTO and RPO mean for you.
Read more
Wouter Damen
Application development
First reporting round of NXTGEN Hightech
More than 800 users across 61 projects submitted their financial reports through Het Groeiportaal.
Read more
Steven Bronsveld
Application development · Events
Demo day – trade fair simulation
For the Demo Day of the Vibe of the Future Festival we built an interactive trade fair floor plan with a visitor simulation.
Read more
Steven Bronsveld
Application development
Bronscode checklist
Our quality checklist gives an overview of criteria for high-quality software and an efficient way of working.
Read more