Counseling team Information Security-His 2 program

Description of the task/assistance
Helse Nord IKT HF (HNIKT) is the data processor for the other health trusts in Helse Nord, and has a strong focus on information security as its core business. Today's national guidelines place high demands on the quality and security of the health trusts' infrastructure, ICT systems, and processes.

The HIS 2 program was established at the beginning of 2022 to continue the ongoing work of raising the regional ICT security level, allowing Helse Nord to provide safe healthcare services for patients and healthcare personnel. The program consists of several projects, all of which are working to deliver measures in information security in Helse Nord, and to provide regional solutions in technology, processes, and support.

Most of the projects are now in the process of being completed and as such, the program is also planned to be completed by the end of autumn 2024. In connection with the end of the program and the handover of projects to operation and maintenance, Helse Nord IKT places great emphasis on a seamless transition. Most of the products being handed over are dependent on good maintenance in order to ensure that their effects on information security can be realized by the organization. In this regard, Helse Nord IKT sees a need for the program to support the line organization in establishing good follow-up, reporting, and further development of the products. The program needs assistance in establishing good KPIs and reporting mechanisms for the products that are now being handed over to operation and maintenance.

Although the program is now being completed, the need for continuous investment in information security will persist due to a constantly changing threat landscape and technology area. As a result, Helse Nord IKT is considering establishing a separate sub-portfolio for security measures to be included in the other project portfolio. Prioritizing and selecting the right measures will be a central part of the work in such a portfolio. The HIS program has been tasked with developing a methodology to be used in prioritizing security measures within the security portfolio. In this work, the program needs consulting and assistance in establishing the methodology.

Helse Nord IKT is also considering acquiring a SOC service to complement the internal security center. The program has