NEWS AND EVENTS
Water supply and critical infrastructure in focus at the Homeland Security Conference in Denmark
What does it take to keep society running when critical infrastructure is exposed to attacks and disruptions? This question was central when I attended the Homeland Security Conference in Copenhagen on 7 October with the Norwegian Cybersecurity Cluster. A cyberattack on a Danish waterworks showed how quickly digital vulnerabilities can have physical consequences.
Securenok was invited by the Norwegian Cybersecurity Cluster to take part in this year's Homeland Security Conference in Denmark. The conference was organized by the Danish CenSec, a cluster organization that in many ways has a similar role to the Norwegian Cybersecurity Cluster in Norway.
Both organizations work to strengthen collaboration between industry, authorities and knowledge communities, contribute to innovation and develop the competitiveness of Nordic companies in security and defence.
The conference brought together both established suppliers to the Danish defence industry and new technology companies with solutions aimed at a growing need for security, preparedness and cybersecurity.
One recurring theme was the need for greater European and Nordic control over critical technology, infrastructure and data. Experience from real incidents, security policy developments and increased uncertainty around previously established alliances have made digital sovereignty and control of our own value chains ever more relevant.
From drone defence to societal resilience
The range of talks at the conference was wide. We heard, among other things, about solutions for effective drone defence and mobile production facilities that can be quickly set up in the field to produce biological materials and other necessary supplies under demanding conditions.
There were also interesting perspectives on how culture and social structure affect the ability to handle crises. Iceland, for example, was highlighted as a society that throughout history has developed a particular ability to adapt to demanding natural conditions and unforeseen events.
The common denominator was the need to build societies that can not only withstand attacks and disruptions, but also maintain critical functions when something does go wrong.
When a cyberattack created fear among the Danish population
For me, one of the most interesting talks came from Morten von Seelen, VP and founder of Truesec Denmark.
He started from the cyberattack on Tureby-Alkestrup Vandværk in December 2024, in which attackers gained access to the waterworks' control system and manipulated the pump pressure. This led to burst pipes and interruptions in the water supply.
But the most interesting thing about the talk was not the technical details or the physical damage. It was how a single incident could create fear and uncertainty far beyond those actually affected.
Although the attack on a single waterworks did not in itself constitute a national crisis, the reactions it triggered were far more serious. When residents start to question whether the water in the tap is safe, and whether society is able to protect the most basic services we depend on, it is no longer just about one waterworks.
Read more about the incident at Danske Vandværker.
.JPEG)
The value of travelling together
The trip to Copenhagen also provided a good opportunity to experience the value of cluster collaboration in practice.
The Norwegian Cybersecurity Cluster brings together industry, academia and public actors around collaboration, innovation and skills development. When Norwegian companies attend international meeting places together, it creates opportunities for sharing experience, new relationships and future collaboration.
For Securenok, this is particularly interesting because many of the challenges we work on in Norway are also high on the agenda in our Nordic neighbouring countries.
We encounter many of the same needs, while having different experiences and approaches to how the challenges can be solved.
Norwegian municipalities face the same challenges
The incident at the waterworks in Denmark is particularly relevant to the work we are now doing at Securenok. We work actively with Norwegian municipalities and water and wastewater organizations to give them a better overview and control of the operational technology that runs their facilities.
Many organizations have good control of traditional IT systems, but lack corresponding insight into which devices are actually connected to their OT networks, how they communicate and whether there are weaknesses that can be exploited.
Through our OT health check, we offer a fast and cost-effective way to establish this overview.
By monitoring and analyzing traffic in the OT network over a period of time, we can identify devices, map communication patterns and uncover potential security weaknesses. The result is a report with concrete findings and recommended measures that gives the organization a better basis for prioritizing its security work.
Of course, this alone is not enough to secure a waterworks against all types of attack. But it is an important starting point. To protect critical infrastructure, you first need to know what you have, how the systems fit together and where the risk lies.
Experiences from IVAR IKS
A good example of how this can be done in practice is our collaboration with IVAR IKS, which provides water and wastewater services to municipalities in Rogaland.
Together with one of our partners, Netsecurity, we have shown how a better overview of OT environments and continuous security monitoring can help strengthen security in critical water and wastewater facilities.
We recently shared the experiences from this work in a webinar, in which IVAR described its approach to OT security and how it is working to gain better control of its facilities.
My most important reflection after the conference in Copenhagen is that we do not need to wait for a serious incident before tackling security in critical infrastructure.
The incident in Denmark shows why this work is important. The experiences from IVAR show how Norwegian organizations can get started.
Feel free to watch our webinar with IVAR IKS and NetSecurity to learn more about how we work with OT security in the water and wastewater sector.
Watch the webinar with IVAR IKS here.
Insights from Norway’s cybersecurity experts
My first Attack conference: Golf, good conversations and a more serious backdrop
How do you present a cybersecurity company to potential customers while you are still learning about it yourself? I got to practise that when I attended my very first conference, the Attack conference, with SecureNOK on 13 October.
SNOK Health Check picks up speed – we are delivering OT overview after OT overview
What equipment is connected to the OT network, and who is communicating with whom? After several projects with the SNOK Health Check, I see how useful it is to get answers to these questions before deciding on the next security measure.
Halfway through the OT Roadshow – time for the conversations that often have to wait
Trondheim, Bergen and Stavanger are done, and we are halfway through the OT Roadshow. For me, this is a valuable opportunity to look up from technology development and discuss security with those who know the everyday reality of industry.
Full house as IVAR IKS shared its experiences with OT security
Interest in the webinar with IVAR IKS was greater than we had dared to hope. Through our October campaign on health checks for water and wastewater facilities, we are now making it easier for more organizations to take the same first step towards better overview and control of their OT environments.
ON 104 has been updated: New requirements for safer and more robust operations on the Norwegian continental shelf
From 1 June 2026, the updated version of Offshore Norge Guideline 104 (ON 104 Rev. 7) applies – one of the most important frameworks for cybersecurity in operational technology (OT) in the petroleum industry.
The Norwegian Food Safety Authority's new guide makes one thing clear: Waterworks must now take OT security seriously
The Norwegian Food Safety Authority (Mattilsynet) has now published the first official guide to the Digital Security Regulations for drinking water. It is an important milestone for Norwegian water supply – and a clear signal that the authorities are now stepping up work on digital security in the sector.
OT Konferansen shows the Nordics taking a leading role in OT security
Today, many industrial environments consist of industrial networks, virtual environments, Windows and Linux systems, remote access, patching and backup solutions, security tools, cloud services and integrations with IT.
OT security in the food industry starts with insight
As a project manager on OT security projects, I often encounter the same starting point at industrial companies: They know a great deal about production, processes and equipment – but far less about what the digital infrastructure actually looks like in practice.
Norwegian-developed OT security technology for industry and critical infrastructure
Norwegian industry is becoming increasingly digitalized. Production lines, process plants, energy systems and critical infrastructure are being connected more closely to modern IT systems, external suppliers and digital services. At the same time, there is a growing need for cybersecurity solutions actually developed for industrial environments.
Strong support for OT Konferansen 2026 – bringing together leading experts in Stavanger
OT Konferansen 2026 takes place on 29 April in Stavanger, and this year's edition already stands out with a programme that brings together some of the most central players in OT security and industrial digitalization.
Growing need for control in complex automation environments in oil and gas
In recent years, the digitalization of the oil and gas industry has brought significant gains in efficiency, better data and greater flexibility. At the same time, this development has led to a significant increase in complexity – and therefore also in risk.
How to gain control of the OT environment in practice – experiences from IVAR
For IVAR IKS, stable operations are not just a goal – they are a prerequisite for society to function. As a provider of water and wastewater services to around 360,000 residents in Nord-Jæren, the organization manages critical infrastructure where the consequences of failure are immediate and extensive.
The Preparedness Year 2026: Are water and wastewater in Norwegian municipalities secure enough?
Municipal water supply is among the societal functions covered by the Digital Security Act. The Act entered into force on 1 October 2025 and sets basic requirements for digital security in organizations of particular importance to society. The regulations also place responsibility for digital security clearly with the organization's top management.
Stricter Security Requirements for Critical Services from 1 October 2025 under theDigital Security Act
O nFriday, 20 June, the Norwegian government decided in a Council of State meeting that the Digital Security Act will enter into force on 1 October 2025. At the same time, the Digital Security Regulation was adopted, entering into force concurrently with the Act.
Bremanger Breach: Lessons from a Norwegian Dam Hack
Earlier this year, unidentified hackers breached the control system of a Norwegian dam at Risevatnet, in Bremanger. The hackers discovered that the dam had a Human Machine Interface (HMI) exposed on the Internet and was able to gain access by exploiting a weak password.p
Digitalization: Opportunities and New Risks
Digitalization offers enormous opportunities for efficiency, but it also introduces new risks. When OT systems (Operational Technology) are connected to the internet, vulnerability to attacks increases—attacks that threaten not only data, but also lives, health, and critical societal functions.