The approval process for BEGRENSET

One of Skytale's customers has received approval from the Norwegian National Security Authority for communication classified BEGRENSET under the Norwegian Security Act, with Skytale as the technical foundation. The approval covers the delivered application together with the cloud service provider. The customer's own use must be approved separately, and we guide the customer through that process.

There are two parts, and both must be in place. The first is the solution: the application together with the cloud service provider it runs on. The second is the organisation using it, with its own procedures, roles and risk assessments. A product cannot receive a single blanket approval that then allows anyone to use it freely.

What the Norwegian Security Act regulates

The Norwegian Security Act applies to organisations and suppliers. It requires organisations to protect information and systems that affect national security interests. Skytale supports your organisation's compliance with the Act.

Security classifications are divided into levels according to the harm that could result if information is compromised. BEGRENSET is the lowest of these levels. It is also the level relevant to much of the day-to-day work in Norwegian organisations with security requirements.

The process, step by step

1. The organisation identifies the information to be shared and its classification level.
2. The solution is assessed together with the cloud service provider it runs on.
3. The organisation documents its own procedures, roles and risk assessments.
4. The authority reviews the application and issues a decision for the individual organisation.
5. After approval, use is monitored in accordance with the requirements in the decision.