Stricter requirements for manufacturers of digital solutions – Securenok is ready

How do you present a cybersecurity company to potential customers while you are still learning about it yourself? I got to practise that when I attended my very first conference, the Attack conference, with SecureNOK on 13 October.

What equipment is connected to the OT network, and who is communicating with whom? After several projects with the SNOK Health Check, I see how useful it is to get answers to these questions before deciding on the next security measure.

What does it take to keep society running when critical infrastructure is exposed to attacks and disruptions? This question was central when I attended the Homeland Security Conference in Copenhagen on 7 October with the Norwegian Cybersecurity Cluster.

Trondheim, Bergen and Stavanger are done, and we are halfway through the OT Roadshow. For me, this is a valuable opportunity to look up from technology development and discuss security with those who know the everyday reality of industry.

On 13 October, we spoke at the Attack conference and asked one question: Do you actually know who has access to our water?

Over the past few years, both Securenok and the OT cybersecurity market have developed significantly.

For the past five months, we’ve been deeply engaged in redefining the visual identity and communication strategy of Securenok.

Interest in the webinar with IVAR IKS was greater than we had dared to hope. Through our October campaign on health checks for water and wastewater facilities, we are now making it easier for more organizations to take the same first step towards better overview and control of their OT environments.

I have spent the whole year talking to people responsible for water supply, energy production and industrial facilities in Norway.

We are proud to announce a partnership with Securenok, a Norwegian provider of OT cybersecurity and developer of the SNOK® monitoring platform

CISA, NSA, FBI, DOE and EPA have issued a joint cybersecurity advisory warning industrial organizations of an active cyber threat targeting Siemens S7 Series PLCs.

Having worked with many organizations and customers in OT security, one thing has made a particular impression on me in the collaboration with IVAR IKS: They chose to act before they had to.

The answer we most often get is not the one the organization itself would have given. Meet us at the Attack conference.

We continue to develop the SNOK® Cybersecurity Monitoring System with one clear goal: to make it easier to get an overview of the OT environment and understand what is actually happening from a security perspective.

AI was naturally high on the agenda at this year's Arendalsuka, and my contribution to the discussion was: “Do we have enough control to let AI agents into Norwegian industry?”

Lessons from Tekna's course on OT and industrial cybersecurity (IEC 62443)

From 1 June 2026, the updated version of Offshore Norge Guideline 104 (ON 104 Rev. 7) applies – one of the most important frameworks for cybersecurity in operational technology (OT) in the petroleum industry.

We are bringing real OT findings, real customer cases and insight from a year of continuous monitoring

‍

The Norwegian Food Safety Authority (Mattilsynet) has now published the first official guide to the Digital Security Regulations for drinking water. It is an important milestone for Norwegian water supply – and a clear signal that the authorities are now stepping up work on digital security in the sector.

Artificial intelligence is no longer just a topic for IT departments or technology companies. Development is now moving rapidly into industry, energy, critical infrastructure and societal preparedness.

It is 02:31, and a production line at a food manufacturer has stopped. No alarm has sounded, no one has reported a fault, and there is no open maintenance order. The line just isn't running.

Today, many industrial environments consist of industrial networks, virtual environments, Windows and Linux systems, remote access, patching and backup solutions, security tools, cloud services and integrations with IT.

Today, many industrial environments consist of industrial networks, virtual environments, Windows and Linux systems, remote access, patching and backup solutions, security tools, cloud services and integrations with IT.

When we took part in the NITO webinar “OT security in 2026: From legal requirements to practical measures in industry”, the goal was to make OT security less theoretical and more practical.

As a project manager on OT security projects, I often encounter the same starting point at industrial companies: They know a great deal about production, processes and equipment – but far less about what the digital infrastructure actually looks like in practice.

Norwegian industry is becoming increasingly digitalized. Production lines, process plants, energy systems and critical infrastructure are being connected more closely to modern IT systems, external suppliers and digital services. At the same time, there is a growing need for cybersecurity solutions actually developed for industrial environments.

‍

‍

OT Konferansen 2026 takes place on 29 April in Stavanger, and this year's edition already stands out with a programme that brings together some of the most central players in OT security and industrial digitalization.

Reflections from one of the most important arenas for digital security in the municipal sector – and what we must dare to face.

In recent years, the digitalization of the oil and gas industry has brought significant gains in efficiency, better data and greater flexibility. At the same time, this development has led to a significant increase in complexity – and therefore also in risk.

For IVAR IKS, stable operations are not just a goal – they are a prerequisite for society to function. As a provider of water and wastewater services to around 360,000 residents in Nord-Jæren, the organization manages critical infrastructure where the consequences of failure are immediate and extensive.

Municipal water supply is among the societal functions covered by the Digital Security Act. The Act entered into force on 1 October 2025 and sets basic requirements for digital security in organizations of particular importance to society. The regulations also place responsibility for digital security clearly with the organization's top management.

For the past five months, we’ve been deeply engaged in redefining the visual identity and communication strategy of Securenok.

This year’s conference highlighted that many organizations have made significant progress in terms of plans, policies, and documentation, yet there remains a gap between what is planned and what is actually implemented in OT environments.

Download our white paper “Cybersecurity in the Food Industry” for free and gain practical guidanceon how to secure continuity and regulatory compliance in your production environment.

O nFriday, 20 June, the Norwegian government decided in a Council of State meeting that the Digital Security Act will enter into force on 1 October 2025. At the same time, the Digital Security Regulation was adopted, entering into force concurrently with the Act.

The NIS 2 Directive is the European Union’s updated and strengthened framework for managing cybersecurity risks across critical and important service providers.

Earlier this year, unidentified hackers breached the control system of a Norwegian dam  at Risevatnet, in Bremanger. The hackers discovered that the dam had a Human Machine Interface (HMI) exposed on the Internet and was able to gain access by exploiting a weak password.p

Digitalization offers enormous opportunities for efficiency, but it also introduces new risks. When OT systems (Operational Technology) are connected to the internet, vulnerability to attacks increases—attacks that threaten not only data, but also lives, health, and critical societal functions.