What is NSM?
NSM stands for the Norwegian National Security Authority, which is Norway’s national body for security and preparedness. Together with the Norwegian Intelligence Service and the Police Security Service (PST), NSM forms one of Norway’s three intelligence, surveillance, and security services.
The main task of the service is to improve Norway’s ability to protect itself against espionage, sabotage, terrorism, and complex threats. Through advisory services, inspections, supervision, testing, and research, NSM helps organizations secure civilian and military information, systems, assets, and infrastructure that are important to national security.
NSM is responsible for a national alert system (VDI) designed to detect and warn about cyber operations targeting digital infrastructure. NSM also has a national responsibility for coordinating the handling of serious cyber operations. The National Cyber Security Center (NCSC) is a part of NSM.
NSM also conducts security clearances of personnel subject to the Security Act. NSM has developed several handbooks, courses, and guides for IT security, including the NSM Basic Principles for ICT Security.
NSM is administratively subordinate to the Ministry of Justice and Public Security, while the Ministry of Defence has authority to issue instructions to NSM in matters within its area of responsibility.
Sicra and NSM
Sicra can help companies meet NSM’s security requirements through services such as “CISO-for-hire,” “security analysis,” and “regulatory requirements and compliance.” This helps ensure that companies follow NSM’s recommended principles for ICT security and maintain a high security standard.
Services:
Read more about “security analysis” here >
Read more about “regulatory requirements and compliance” here >
Read more about "CISO-for-hire" here >
Related terms: Artificial intelligence (AI), Artificial general intelligence (AGI), Antivirus, Compliance, Cybersecurity, GDPR, NIS2, DORA, Expert systems (AI), ISO/IEC27001, Security classification, SOC, CISO-for-hire, Threat intelligence, Zero Trust, Zero-day vulnerability, SLA, Security audits, Machine learning (AI), Neural networks and deep learning (AI).