Training

All employees are daily exposed to various areas and situations that deal with the GDPR. Much of the training will take place in connection with real situations and cases.

The CISO is part of product development, and training and competence transfer is a natural part of this.

The CISO and DPO participate in various networks and meetings/seminars regarding GDPR.

"ISMS - Manage confidential and sensitive information" is part of the induction program for new employees.

2019 -> Townhall meetings - as there is need and time, various matters and topics are presented and discussed

2021 - All employees have received training in procedure "ISMS - Manage confidential and sensitive information".

2022 - All employees completed "NSM grunnprinsipper for IKT-
sikkerhet".

2023 - All employees reviewed the security incident procedure. A real example was used for training and improvement

2024 - All employees - review of “Information Security and privacy for Employees”