Written with AI assistance.
How does ProsessPilotene approach information security?
ProsessPilotene's technical article describes an approach focused on identities, access control, services and endpoints. It starts from the fact that employees use cloud services and work from different locations.
The article emphasises cooperation between HR and IT throughout employment. Account creation, changes and closure require follow-up, and access should reflect the work employees perform.
This is background from the original article, rather than a complete account of the controls in a particular customer delivery. Specific requirements and responsibilities must be documented in the agreement and delivery documentation.
Ask a question or share what helped you.
Information security | Questions and answers
As long as you have a purpose for keeping them. The Norwegian Bookkeeping Act requires accounting documentation to be retained for five years, but this does not apply to everything.
Information security | Questions and answers
Information security | Questions and answers
Artificial intelligence | Questions and answers
What should we consider before letting AI loose on customer data?
Automation | Questions and answers
Information security | Questions and answers
Separate license types for customers and partners, with deliberate restrictions on what they can see.
Because roles are combined, not subtracted. If the user has multiple roles, the most permissive one applies.
What data the model can see, who can see the responses, and what happens when it gets something wrong. Access controls are not inherited automatically.
Anyone who reads or writes data, including indirectly through another solution. Indirect access is the most common source of unexpected costs.
Yes, it is standard in many roles. The question is whether it is wise—the restriction comes at a cost to collaboration.
On 4 August 2026, the Norwegian government announced that its proposed AI Act would return to consultation after changes in the EU simplification package.
The EDPB published new guidelines on web scraping for generative AI and adopted final blockchain guidelines.
Norway’s National Security Authority (NSM) says organisations should address the quantum threat by 2030 with post-quantum cryptography that fits existing architectures. It advises against quantum key distribution (QKD), citing technical and fundamental limitations.
Norwegian authorities invited organisations to comment on draft EU guidelines for classifying high-risk systems.
The EDPB opened a consultation on guidelines for processing personal data in scientific research, including research using artificial intelligence.
Share a question or reflection.
Be the first to contribute.