Security
Have you taken sufficient measures to secure the values in your business against unwanted, intentional actions?
Safetec helps businesses gain an overview of their own assets and identify threats related to these. Good safeguarding of values requires digital, personnel and physical measures and good interaction between people, technology and organisation. We offer an interdisciplinary and potent combination of practical experience, theoretical understanding and human and technical expertise."
Security risk management
To choose appropriate security measures, one must have a good and up-to-date overview of one's values and vulnerabilities.
Loss and damage to critical values can affect the company's production, competitiveness, and reputation. Values may include:
- Employees who have the competence and experience the business depend on
- Sensitive or confidential information
- Buildings, equipment, ICT systems, and other infrastructure
Security risk management systematically maps values, threats, and vulnerabilities. The assessments cover digital security (ICT), physical security, and personnel security. Our analyses are based on best practices and established professional standards. This includes relevant NS and ISO standards and guides from the National Security Authority.
Specialist Adviser
jens.christian.holst@safetec.no
- Business values
- Threats to the values
- Vulnerabilities that could expose values to threats
- Priority measures
Valuation
All businesses have values that need to be protected. Loss and damage to critical values can affect both the company's production, competitiveness, and reputation.
A value can be understood as a resource that, if exposed to undesirable influence or lapses, will have a negative consequence for the resource's owner, manager, or beneficiary.
In valuation, the purpose is to identify, assess and rank the values the company owns or manages on behalf of others.
Values may include
- Employees who have the competence and experience the business depend on
- Sensitive or confidential information
- Buildings, equipment, ICT systems, and other infrastructure
- Economy
Senior Safety Adviser
christina.thingvold@safetec.no
- Values
- Degree of dependence
- A starting point for vulnerability assessment and security risk management
- Prioritise measures and resource use
Information security
Safetec has several experts who can contribute to protecting companies' information, both against intentional and unintentional actions.
Safetec's expertise covers information and information systems, and our advisers work with the physical security of the information and logical security of ICT systems (digital/cyber security). This includes the preparation of emergency preparedness analyses and planning related to information security incidents.
In addition to ICT security, Safetec has expertise in securing operational technology (OT) systems. Together with our partners, Safetec can also offer penetration testing of IT / OT systems to detect vulnerabilities in the systems and incident management related to digital/cyber incidents.
Specialist Adviser
jens.christian.holst@safetec.no
- All relevant information the company has at its disposal, both physical and digital, including physical documents, digital and machine-readable signals, film, audio recordings, and oral information, etc.
- All information systems that collect, store, process, transmit, and present the information (physical and digital).
- The criticality, integrity, and availability of the information.
- That necessary analyses and assessments related to the protection of the information are updated regularly to ensure that the protection is adapted and appropriate concerning the threat picture.
- All measures and barriers that are subject to the necessary management to ensure that these function as intended at all times.
Harbour security
The ISPS regulations came into force in 2004 and set requirements for securing harbors and harbor facilities with international traffic.
Safetec is a recognised provider of security services (RSO - Recognised Security Organisation), approved by the Norwegian Coastal Administration, following the ISPS code (The International Ship and Port Facility Code).
Senior Safety Adviser
tine.vivoll@safetec.no
- Security risk management analyses
- Security plans
- Emergency preparedness plans
- Support and guidance in ISPS-related application processes.