Digital security has taken on an entirely new meaning in today's society. War, international unrest, and an increasingly complex threat landscape mean that both public and private organizations need to rethink how they protect their assets and infrastructure.
“We are in a critical time. It's becoming faster and faster to find vulnerabilities in systems and applications, while at the same time it’s challenging to detect and fix security holes as quickly as they appear. Artificial intelligence makes it possible to identify vulnerabilities at a pace we've never seen before,” say Vibeke Vrålid, leader, and Børre Holmberg at Vivicta.
Vivicta is a Nordic tech company that provides services in IT infrastructure, operations, platform services, and digital management. The company works with businesses in sectors including energy, industry, public sector, finance, and healthcare.
From the Herøya environment, the company contributes expertise in areas such as networking, security, servers, and IT infrastructure. With around 30 employees and a broad professional network, Vivicta covers several parts of the digital value chain.
The entire value chain needs to be secured
One of the biggest challenges for many businesses is that they don’t necessarily have full insight into their own IT systems. Applications and software can be used without the IT department being aware of them. This is often referred to as shadow IT. When no one has clear responsibility for the systems, it also becomes harder to spot vulnerabilities, ensure updates, and handle incidents.
The challenge becomes even bigger in industrial companies, where IT systems are often connected to older systems and operational technology (OT).
- We see how important it is to have control over what you actually have. Who owns the systems? Are they updated? Who’s responsible if something happens? You need to be able to track and have an overview of the entire infrastructure, says Vibeke Vrålid.
Vibeke leads Vivicta's department at Herøya and really appreciates being part of the strong industrial community in the park.
Safety is a management responsibility
For Vivicta, the message is that digital security cannot be left solely to the IT department.
"Security work must be anchored in management and be part of the company's risk management and preparedness," says Vibeke Vrålid. It's about understanding what consequences an incident can have for employees, customers, suppliers, and the company's ongoing operations.
"It's not much use having good procedures if no one knows who to contact when something happens. Responsibilities and contact points must be known in the organization," emphasizes Børre Holmberg, adviser in security and head of governance globally.
If your company has questions about digital security, vulnerabilities, or preparedness, you can contact Børre Holmberg: borre.holmberg@vivicta.com
Text: Hege Pflug