Framework
Full specification

NSM ICT-SP

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

NCM ICT Security Principles is a framework for ICT security published and maintained by the Norwegian National Security Authority (NSM). The security principles advice businesses and organisations on how to protect their information systems from unauthorized access, damage or misuse.

NCM ICT Security Principles is a framework for ICT security published and maintained by the Norwegian National Security Authority (NSM). The security principles advise businesses and organisations on how to protect their information systems from unauthorized access, damage or misuse.

The principles focus on technological and organisational measures. Measures concerning physical security and the human perspective are generally not covered. The measures apply to both unintentional and intentional acts, although the main focus is on intentional acts.

In this framework there are 21 security principles with a total of 118 security measures, distributed across four categories: i) identify, ii) protect and maintain, iii) detect and iv) respond and recover.

Tasks
139
Scope
Norway
Here's what
NSM ICT-SP
requires and how to comply.

Below you'll find all of the requirements of this framework. In Cyberday, we map all requirement to global tasks, making multi-compliance management easy. Do it once, and see the progress across all frameworks!

Requirements
2.1.4: Reduce the risk of targeted manipulation of ICT products in the supply chain
2.1.5: Use a secure software development method
2.1.6: Use separate environments for development, test and production
2.1.7: Implement adequate testing throughout the development process
2.1.8: Maintain the software code developed/used by the organisation
2.1.9: Maintain security responsibility during outsourcing
2.1.10: Review the service provider’s security when outsourcing
2.2.1: Establish and maintain a comprehensive security architecture
2.2.2: Design the ICT system using ICT products which integrate well
2.2.3: Segment the organisation’s network in accordance with its risk profile
2.2.4: Physically isolate the most critical subnets
2.2.5: Partition the domain architecture in accordance with the organisation’s needs
2.2.6: Control access to services based on knowledge of users and devices
2.2.7: Establish a robust and resilient ICT architecture
2.3.1: Establish centrally managed practices for security updates
2.3.2: Configure clients so that only software known to the organisation is able to execute
NSM ICT-SP
learning hub

Explore our comprehensive resources and improve your security with the themes of this framework.

How Cyberday helps with
NSM ICT-SP

Discover specific ways our platform streamlines your ISO 27001 compliance process, from automated controls to audit preparation.

Explore use case
Free
NSM ICT-SP
assessment

Take our comprehensive assessment to identify gaps in your current implementation and get personalized recommendations.

Start assessment
Read more about
NSM ICT-SP

Dive deeper with our articles, case studies, and expert insights on framework implementation.

Read article
Guide to compliance

Get a concise overview of all requirements, controls, and implementation steps in our quick guide.

Get the guide
Framework comparison

See how the overlap and differences with any other framework to optimize your compliance strategy.

Compare framework
Join a live
NSM ICT-SP
webinar

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
Join our live webinars

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
What are frameworks?

Understand the basics of cyber security frameworks with our comprehensive guide.

Read the article

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.