NEWS AND EVENTS
Better overview. More control.
Av Nina Hesby Tvedt, CTO i Securenok
We continue to develop the SNOK® Cybersecurity Monitoring System with one clear goal: to make it easier to get an overview of the OT environment and understand what is actually happening from a security perspective.
With SNOK 1.19, we are introducing several improvements that make the solution easier to configure, manage, and scale. At the same time, users get better insight into the devices that SNOK monitors and their communication.
This release has a particular focus on user-friendliness, asset management, flexible configuration, and integration capabilities—important areas for both our customers and the partners who build services around SNOK.
Here are some of the most important new features, please contact us to receive the full release notes listing all new features and improvements.
Better overview of your OT assets
Asset Management in SNOK now allows the user to add custom attributes to assets and use these to structure information according to how your organization prefers to work. This could, for example, be information related to location, criticality, system, or other properties relevant to each specific OT environment. Import and export capabilities have also been extended, making it easier to manage asset information in larger environments.
Asset Details displays more information about each asset previously only found in the SNOK baseline, including which protocols the device uses and which IP addresses it communicates with. SNOK also extracts information from the network traffic andsupports additional protocols.
The result is richer asset data and a better picture of what actually exists and communicates within the OT environment.
Prioritize events according to criticality
Not all parts of an OT environment are equally critical.
The Security Impact Zone functionality has been extended to allow organizations to define custom zones and determine the severity level that alarms and events should receive within each zone.
One or more subnets can be linked to each Impact Zone, and you can create as many zones as the environment requires.
This makes it possible to assess an incident in the context of where it occurs. The same type of activity can have highly different significance depending on whether it takes place in a less critical area or in a production or safety critical part of the plant.
This ensures better prioritization and makes it easier to focus attention on the events that matter the most.
Easier to adapt to changes in the OT environment
OT environments are not static. Equipment is replaced, communication changes, and new connections are established. Therefore, the baseline must also be able to evolve.
In SNOK 1.19, the network baseline edition functionality has been improved reducing the need to reestablish the SNOK baseline through a new learning period after maintenance work or other changes. The baseline editions can later be restored if they should be included in the normal baseline again.
This makes it easier to maintain a relevant baseline over time—and reduces the effort needed to adjust monitoring when the OT environment changes.
Improved integration interfaces
In SNOK 1.19, the REST API has been expanded with new capabilities to retrieve and manage configuration information and manage the baseline. This allows partners to perform management tasks beyond receiving and managing security alarms and events in SNOK without manually logging in to the platform.
This is an area we will continue to prioritize moving forward, enabling our partners to carry out all periodic tasks in SNOK through the API.
More flexible alarm management
We have also made it easier to configure how SNOK assesses the severity of events.
A new panel makes setting up and changing advanced severity rules simpler and clearer. It is now also possible to create rules for single IP addresses.
Together with Security Impact Zones, this provides greater flexibility to adapt the monitoring to each specific OT environment and the organization's own priorities.
Use SNOK to harvest network captures
The SNOK Network Sensor can now be used to perform full network capture.
A new wizard helps the user configure the capture process. This makes it possible to extract more detailed network information when inspecting and analyzing the environment.
Easier to use. Better insight into OT.
SNOK 1.19 is not just about adding more features.
For us, product development is about making it easier to extract value from the information SNOK collects: a better overview of assets, more relevant detection, simpler administration, and better opportunities to share OT insights with the rest of the security organization.
This is also important when SNOK is to be used across multiple locations and included as part of larger security and deliveries from third party SOC service providers.
We therefore continue to develop SNOK in close cooperation with our customers and partners—with the goal of making OT monitoring easier to implement, use, and integrate.
See your security gaps.
Insights from Norway’s cybersecurity experts
My first Attack conference: Golf, good conversations and a more serious backdrop
How do you present a cybersecurity company to potential customers while you are still learning about it yourself? I got to practise that when I attended my very first conference, the Attack conference, with SecureNOK on 13 October.
SNOK Health Check picks up speed – we are delivering OT overview after OT overview
What equipment is connected to the OT network, and who is communicating with whom? After several projects with the SNOK Health Check, I see how useful it is to get answers to these questions before deciding on the next security measure.
Water supply and critical infrastructure in focus at the Homeland Security Conference in Denmark
What does it take to keep society running when critical infrastructure is exposed to attacks and disruptions? This question was central when I attended the Homeland Security Conference in Copenhagen on 7 October with the Norwegian Cybersecurity Cluster.
Halfway through the OT Roadshow – time for the conversations that often have to wait
Trondheim, Bergen and Stavanger are done, and we are halfway through the OT Roadshow. For me, this is a valuable opportunity to look up from technology development and discuss security with those who know the everyday reality of industry.
Full house as IVAR IKS shared its experiences with OT security
Interest in the webinar with IVAR IKS was greater than we had dared to hope. Through our October campaign on health checks for water and wastewater facilities, we are now making it easier for more organizations to take the same first step towards better overview and control of their OT environments.
ON 104 has been updated: New requirements for safer and more robust operations on the Norwegian continental shelf
From 1 June 2026, the updated version of Offshore Norge Guideline 104 (ON 104 Rev. 7) applies – one of the most important frameworks for cybersecurity in operational technology (OT) in the petroleum industry.
The Norwegian Food Safety Authority's new guide makes one thing clear: Waterworks must now take OT security seriously
The Norwegian Food Safety Authority (Mattilsynet) has now published the first official guide to the Digital Security Regulations for drinking water. It is an important milestone for Norwegian water supply – and a clear signal that the authorities are now stepping up work on digital security in the sector.
OT Konferansen shows the Nordics taking a leading role in OT security
Today, many industrial environments consist of industrial networks, virtual environments, Windows and Linux systems, remote access, patching and backup solutions, security tools, cloud services and integrations with IT.
OT security in the food industry starts with insight
As a project manager on OT security projects, I often encounter the same starting point at industrial companies: They know a great deal about production, processes and equipment – but far less about what the digital infrastructure actually looks like in practice.
Norwegian-developed OT security technology for industry and critical infrastructure
Norwegian industry is becoming increasingly digitalized. Production lines, process plants, energy systems and critical infrastructure are being connected more closely to modern IT systems, external suppliers and digital services. At the same time, there is a growing need for cybersecurity solutions actually developed for industrial environments.
Strong support for OT Konferansen 2026 – bringing together leading experts in Stavanger
OT Konferansen 2026 takes place on 29 April in Stavanger, and this year's edition already stands out with a programme that brings together some of the most central players in OT security and industrial digitalization.
Growing need for control in complex automation environments in oil and gas
In recent years, the digitalization of the oil and gas industry has brought significant gains in efficiency, better data and greater flexibility. At the same time, this development has led to a significant increase in complexity – and therefore also in risk.
How to gain control of the OT environment in practice – experiences from IVAR
For IVAR IKS, stable operations are not just a goal – they are a prerequisite for society to function. As a provider of water and wastewater services to around 360,000 residents in Nord-Jæren, the organization manages critical infrastructure where the consequences of failure are immediate and extensive.
The Preparedness Year 2026: Are water and wastewater in Norwegian municipalities secure enough?
Municipal water supply is among the societal functions covered by the Digital Security Act. The Act entered into force on 1 October 2025 and sets basic requirements for digital security in organizations of particular importance to society. The regulations also place responsibility for digital security clearly with the organization's top management.
Stricter Security Requirements for Critical Services from 1 October 2025 under theDigital Security Act
O nFriday, 20 June, the Norwegian government decided in a Council of State meeting that the Digital Security Act will enter into force on 1 October 2025. At the same time, the Digital Security Regulation was adopted, entering into force concurrently with the Act.
Bremanger Breach: Lessons from a Norwegian Dam Hack
Earlier this year, unidentified hackers breached the control system of a Norwegian dam at Risevatnet, in Bremanger. The hackers discovered that the dam had a Human Machine Interface (HMI) exposed on the Internet and was able to gain access by exploiting a weak password.p
Digitalization: Opportunities and New Risks
Digitalization offers enormous opportunities for efficiency, but it also introduces new risks. When OT systems (Operational Technology) are connected to the internet, vulnerability to attacks increases—attacks that threaten not only data, but also lives, health, and critical societal functions.