Content library
NSM ICT-SP

Requirements included in the framework

Policy
Linked frameworks
Framework
Tasks
Perform regular penetration testing (at least annually) to identify vulnerabilities
3.4.4
NSM ICT Security Principles (Norway)
2
Test the organisation´s routines for detection and preparedness
3.4.5
NSM ICT Security Principles (Norway)
1
Communicate the results of penetration tests to relevant stakeholders
3.4.6
NSM ICT Security Principles (Norway)
1
Establish plans for incident management
4.1.1
NSM ICT Security Principles (Norway)
2
Perform a business impact analysis
4.1.2
NSM ICT Security Principles (Norway)
3
Describe roles and responsibilities for personnel involved in incident management
4.1.3
NSM ICT Security Principles (Norway)
1
Establish agreements with relevant third parties
4.1.4
NSM ICT Security Principles (Norway)
2
Determine which communication channels to use in the event of an incident
4.1.5
NSM ICT Security Principles (Norway)
2
Test and rehearse the plans regularly so that they are established
4.1.6
NSM ICT Security Principles (Norway)
2
Review log data and collect relevant data on the incident to create a good basis for making decisions
4.2.1
NSM ICT Security Principles (Norway)
4
Determine the severity level of the incident
4.2.2
NSM ICT Security Principles (Norway)
2
Inform relevant stakeholders
4.2.3
NSM ICT Security Principles (Norway)
5
Identify extent and impact on business processes
4.3.1
NSM ICT Security Principles (Norway)
2
Determine whether the incident is under control and take the necessary reactive measures
4.3.2
NSM ICT Security Principles (Norway)
4
Log all activities, results and relevant decisions
4.3.3
NSM ICT Security Principles (Norway)
4
Launch recovery plan during or after the incident
4.3.4
NSM ICT Security Principles (Norway)
1
Co-ordinate and communicate with internal and external stakeholders while managing the incident
4.3.5
NSM ICT Security Principles (Norway)
2
Perform necessary activities after the incident
4.3.6
NSM ICT Security Principles (Norway)
4
Identify experiences and lessons learnt from incidents
4.4.1
NSM ICT Security Principles (Norway)
3
Review identified compromised security measures
4.4.2
NSM ICT Security Principles (Norway)
2
Assess the effectiveness of processes, procedures, reporting formats and organisational structures related to incident response
4.4.3
NSM ICT Security Principles (Norway)
2
Communicate and share findings with relevant stakeholders
4.4.4
NSM ICT Security Principles (Norway)
3

Universal cyber compliance language model: Comply with confidence and least effort

In Cyberday, all frameworks’ requirements are mapped into universal tasks, so you achieve multi-framework compliance effortlessly.

Security frameworks tend to share the common core. All frameworks cover basic topics like risk management, backup, malware, personnel awareness or access management in their respective sections.
Cyberday’s universal cyber security language technology creates you a single security plan and ensures you implement the common parts of frameworks just once. You focus on implementing your plan, we automate the compliance part - for current and upcoming frameworks.
Start your free trial
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.