the telenor norway security way of doing things ... · the telenor norway security way of doing...

The Telenor Norway security way of doing things

- protecting infrastructure Hanne Tangen Nilsen

Chief Security Officer Telenor Norway

160 years of, security and risk. 2018: One of the worlds most online society – it must work – all the time

3

Protecting of everything vulnerable via ICT

4

Corporation

Norway Top Management

Divisions

Operational Units

Departments

4

Operational risk picture

Strategic risk picture

Bottom-up

Top-down Board of

Directors Business Unit

Board of Directors

Telenor ASA

Risk management and anchoring

5

Security management and prioritisation

Security Management System

6

Complex surroundings

7

Traditional security

INTEL methodology to understand threat actors

Thinking the unthinkable

8

Agreement

Service description

Marketing

vendor Telenor

Customer

Authority

/society

Laws and regulations

Agreement with authorities

Licenses

Telenors public response

Agree-

ment

Delivery

Commitment

Policy, requirement,

guidelines

Internal controls

Audit/revision

Delivery

Commitment

Commitment all the way

Preparedness

Crisis management

organisation

Extreme weather Security culture

10

10 Defendable Command&Control Norway vs company

Battling the threat actors together

11

Thanks for the attention