How Softacom Helped RMG Reduce Compliance Risk and Win €400K Projects

Our team approached the project as a phased modernization and security upgrade. We focused on operational risk and expanding platform support and improving compliance.

As usually, we started with investigating the problems, preparing the environment and knowledge transfer. Softacom worked closely with RMG’s team to understand the existing Delphi codebase and build processes.

Parallel to this, we prepared development and test environments for Delphi 12, covering Windows (32-bit and 64-bit) and Linux environments.

Migration to Delphi 12 and Cross-Platform Support

Originally, the core applications were written in Delphi 7. Migration to Delphi 12 was a crucial step to keep the software viable and support future growth. Delphi 7 is no longer aligned with modern operating systems, security requirements or cross-platform deployments. If RMG continued to rely on it, it could face increased operational risk and limit the company’s ability to evolve the product.

During the migration, Softacom worked with a combination of standard Delphi 7 components and custom components that we developed specifically for RMG’s applications. The team carefully adapted them for Delphi 12.

The migration enabled the applications to run on:

• Windows 11
• Windows Server 2019, 2022 and 2025
• Linux environments, including Ubuntu and Amazon Linux

Special attention was given to platform-specific differences to ensure consistent behavior across operating systems. In total, we migrated 14 applications to Delphi 12 (64-bit).

Meeting Security and Compliance (NIS2) Requirements

The system was built around aging mechanisms with the rules of an earlier development era. Authentication and authorization logic were decentralized across applications. Access management relied on manual processes, and security event logging was limited.

RMG was dealing with increased compliance risk as regulatory requirements evolved, especially with the introduction of NIS2. Also, detecting incidents was challenging because there was not enough visibility into security events. Audits were also complicated due to the tight coupling between security logic and legacy code.

As part of the modernization, our team supported a client in aligning their enterprise system with the requirements of the EU NIS2 cybersecurity directive.

The project focused on strengthening authentication, authorization, logging, incident management, and infrastructure integration to meet cybersecurity and regulatory expectations.

We introduced centralized authentication, which gave the company a controlled entry point for user access. Also, we introduced passwords and access rights that were automatically revoked when users left the organization. To store credentials securely, we used cryptography instead of ad-hoc mechanisms.

Softacom team redesigned authorization. We aligned the mechanism with the least-privileged and need-to-know principles. This ensured that users could access only what was required for their role. Thus, we reduced security exposure and operational risk.

Our developers also introduced structured security event logging. The system now records security-relevant event actions and forwards them to a centralized log management platform.

According to the company’s estimations, this project stabilizes their software business for the next 5 to 10 years.

Testing and Validation

Softacom’s team of Quality Assurance specialists prepared detailed test scenarios and a structured test plan. The purpose of this was to validate functional and security changes. We conducted testing across all supporting platforms and addressed defects before delivery.