{"text_format":"1","workbook":"xlsx","n_sheets":5,"sheets":["Graphic summary","Ark8","Ark4","Grafer","srep"],"not_rendered":{"charts":0,"images":0,"macros":1,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Graphic summary","index":0,"n_rows":219,"n_cols":192,"rows_kept":219,"cut":false,"hidden":false,"merged":[[35,4,35,188],[84,4,84,188],[56,4,56,188],[120,4,120,188],[37,4,37,188],[58,4,58,188],[86,4,86,188],[214,4,214,188],[166,4,166,188],[121,6,121,190],[122,4,122,188],[148,4,148,188],[180,4,180,188],[192,4,192,188],[146,4,146,188],[164,4,164,188],[178,4,178,188],[190,4,190,188],[212,4,212,188]]}
[null,"Governance and control",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"Our ICT systems provide a good basis for \n- management of operations\n- control of customer exposures \n- internal reporting and reporting to the authorities ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have documented goals for ICT security and documented security procedures. The goals and procedures have been approved by the executive management.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We comply with the principle of three lines of defence.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We use recognised standards (e.g. EBA Guidelines on ICT and security risk management).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have reviewed our controls of operational risk and security risk during the past 12 months. The review has been carried out by independent and qualified resources.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have a well-established risk analysis process. Employees are familiar with the process and make active and ongoing contributions.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Information forming the basis for risk assessments is collected systematically on an ongoing basis. The information may be analyses of deviations and incidents, information from external sources, results of penetration testing and observations from customers and employees.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have an adequate overview of business-critical ICT equipment and software, including licences. We have an adequate overview of valid configuration of technical solutions.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have a process for a) working out and improving procedures for development and operations and b) for overseeing that the procedures are complied with.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Outsourcing agreements give us audit rights to all aspects of the delivery.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good legal, technical and professional procurement competence. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We follow up our service providers and deliveries on an ongoing basis with respect to delivery quality (KPI), error correction and agreed improvements.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have documented the controls performed in the first line of defence, risk management/compliance and internal audit (the three lines of defence), disaggregated to ensure integrity, confidentiality and availability. There is a specification of who, and which institution, is responsible for carrying out the controls.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good security guidelines. We carry out detailed risk assessments of payment services. We have measures in place to protect users of the payment services against identified risks, including fraud and illegal use of sensitive information and personal data.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[]
[null,"We maintain contact information for the users of our services.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Employees have job descriptions. Employees' responsibilities for control and reporting are set out in their job descriptions.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have a programme for raising the awareness of and training employees in security work.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[]
[null,"Integrity",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"As far as possible, we use controls that help ensure that our systems are not subject to unauthorised changes and that our services function properly. The controls can be version management, code signing, segregation of duties, checksums, etc.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have controls that protect data in both transit and storage. The controls can be checksums, encryption, signing, access controls and procedures for restoration (incremental backup). ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The scale of errors in applications and data that impact data integrity (e.g. double entries, overwriting of customer data) is lower in 2022 than in 2021.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The consequences of errors in applications and data that impact data integrity (e.g. double entries, overwriting of customer data) are less serious in 2022 than in 2021.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We collect information on operations, transactions and fraud and use this information to make the services more secure.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We continuously consider measures to protect customers, e.g. by 1) enabling the customer to turn off features of the payment service (blocking special regions or internet access), 2) notifying the customer (by sms or email) about movements on the customer's accounts/cards or of cases where attempts to access the customer's accounts/cards are rejected and 3) giving the customer easy access to customer support.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"When new solutions are to be developed, we take the needs of all business areas into account. We do this to avoid the challenges associated with ‘silo solutions’, such as extensive software maintenance, complicated operations and challenges associated with data synchronisation.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We do not allow employees working on business tasks or with reporting to develop their own applications (e.g. Excel, MS Access, Python) that are used in our services or in our reporting to the authorities. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Change management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"There is risk associated with non-existent or deficient procedures for change management or compliance.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"There have been no changes in 2022 where the procedures for changes have not been complied with.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The number of changes resulting in unplanned incidents is decreasing.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The number of urgent changes is lower in 2022 than in 2021.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The test systems are ‘production-like’, i.e. test data (anonymised), applications, software, control systems (SW) and hardware are the same for testing as for production.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘"]
[]
[null,"We make changes to the infrastructure (‘non-functional’ changes) during periods with little customer activity and can quickly reverse the change and roll back if necessary.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Security tests are carried out prior to production setting. The testing is performed by persons who have not been involved in the development of the service being tested.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Prior to deployment, an independent review of the code is carried out.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The principle of segregation of duties is maintained throughout the change process, i.e. that different persons are responsible for development, testing, approval and deployment. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"There is a high degree of complexity in the ICT systems. Few people have a total overview and it is difficult to foresee the consequences a change in one system may have for other systems.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Changes in ICT security controls (e.g. firewall rules) are approved by ICT security before being implemented.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Due to a number of new regulatory requirements we frequently have to change our systems.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Operations",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We have carried out risk analyses during the past 12 months, identified areas with a high risk of downtime (e.g. single point of failure) and initiated measures to ensure ongoing operations.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We maintain an overview of the business processes that are affected by non-conformances or business disruptions. Based on the overview, we set targets for maximum restoration time for operations and maximum tolerable downtime.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We regularly review plans, processes and procedures for continuity and restoration of critical ICT systems and services (including outsourced systems and services) and the need for effective communication in this connection in view of a possible loss of critical competence, physical locations, service providers or ICT systems, or cyberattacks.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We use recognised standards for outsourcing, e.g. the EBA Guidelines on outsourcing arrangements.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The outsourcing guidelines define roles and responsibilities, as well as the competence required to monitor and manage risks associated with the outsourced services, including a regular risk assessment of all outsourced services.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Cooperation procedures and the division of responsibilities between us and our service providers are detailed and clear-cut.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We keep an updated overview of all outsourcing and risks associated with the outsourcing. The second and third lines of defence have sufficient expertise and resources, and they check the outsourcing of operations and service providers on a regular basis.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good measures for detecting irregularities (abnormal load, abnormal use of ports/protocols, irregular response times, security incidents) in data traffic and take action before damage occurs.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have updated procedures for handling incidents, including cyber incidents. The procedures include rules for escalation and reporting.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We test the disaster recovery systems to an extent that makes us feel confident that they function as intended. The test includes the restoration of data from backup files.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We monitor ‘ticking bombs’, i.e. components that gradually wear out, and assets that gradually reach levels requiring intervention, such as memory leakage, expired certificate dates, worn out electronic components, an energy supply that is running down (batteries, fuel for emergency generators etc.), CPU, RAM, discs.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have significant ‘technical debt’, which generates operational risk.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘"]
[]
[null,"Our total downtime in 2022 had a lesser impact on our business operations then the downtime we experienced in 2021.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Rights to manage systems and data (‘admin rights’) are granted for as long as it takes when the situation so requires.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The interfaces used by third parties to access payment accounts have been tested and approved in cooperation with the third parties.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The interfaces used by third parties have been secured in accordance with the provisions of Commission Delegated Regulation (EU) 2018/389.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Security",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We implement extensive measures to protect ourselves against attacks (advanced persistence threat, trojans, ransomware, DDoS, email attacks). Examples of measures: intrusion detection and intrusion prevention, firewall, antivirus, control of web traffic, securing of email, security updates, sandboxing. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We conduct regular tests of the security of our services (e.g. penetration testing, testing in accordance with internationally recognised standards, vulnerability scanning).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We check that security controls are appropriate and function properly – annually for critical systems and at least every three years for non-critical systems.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good procedures for security updates.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have control of the following:\n  - who has access to our data and systems\n  - which data and systems the user has access to\n  - why the user has access\n  - the date for the reassessment and identity verification of the user",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Personnel have a personal logon ID. There are no ‘generic users’.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Programmed processes’ login to systems and data is locked into the process so that personnel cannot use the login details to log in.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"It is challenging to obtain access to ICT security expertise, including the expertise to stipulate requirements for service providers and to monitor deliveries.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[]
[null,"We comply with recognised standards that can help ensure the quality and safety of the program code (e.g. OWASP).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We remove software that is no longer in use and software that is no longer supported by the service provider.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"All remote access to our systems takes place using VPN and two-factor authentication.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Data protection",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We have good guidelines for classification and protection of structured (databases) and unstructured (text documents, emails, personal file areas) data.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good procedures for the assignment and maintenance of the rights of employees, service providers, consultants and applications in our systems. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We log access to data and systems. If the event of unauthorised access or attempted access, an alert is triggered and immediately followed up.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have divided the network into security zones based on a security rating of data and systems. The rating determines the extent to which data and functions in the zone are secured physically and logically (access controls, encryption, etc.). The network includes a zone for storing backups.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Data on portable devices are encrypted. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"On termination of data storage agreements, the service provider must document that data have been completely deleted.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have procedures for secure storage and monitoring of sensitive payment information (information that can be misused to commit fraud, e.g. card details and login information), and control of the storage of and access to this information.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"ID theft",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We have good measures in place to prevent that an attacker takes over a user ID and uses it fraudulently.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good measures in place to prevent that an attacker takes over a customer ID and uses it fraudulently.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[]
[null,"We require strong customer authentication in connection with payments for online transactions. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have good control of the issue, use and deletion of customers’ authentication credentials. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We use controls that prevent skimming and card-not-present fraud.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Internal irregularities",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We have carried out a detailed risk assessment and defined fraud scenarios.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have established special logging and alert procedures in connection with situations, scenarios or account movements where the risk assessment concludes that irregularities are likely to occur. This could be in the form of backdating, movements on internal accounts, movements on passive accounts, transfer from a customer to an employee and back, searches of customer data for non-work purposes or employees who are in a squeezed financial situation.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We use the four eyes principle as far as possible.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We monitor employees' own-account trading.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[null,"Money laundering",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2022"]
[null,"We cooperate with other institutions to identify the origin and use of wealth and funds.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"Our ICT systems provide a complete picture of the customer, customer relations and customer behaviour.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We use electronic monitoring of transactions and transaction patterns.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"We have an increasing level of precision in flagging suspicious transactions.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"There is a risk that the transaction monitoring system does not intercept all payment transactions.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The AML systems make extensive use of data from other systems.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The AML systems recognise suspicious patterns over time.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The AML systems intercept that a person has multiple customer relationships across business units.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,"The hits made by the sanction screening system on listed persons and entities have a high level of precision.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→"]
[]
[null,null,null,null,"Green: low vulnerability. Yellow: medium vulnerability. Red: high vulnerability. White: N/A"]
[]
[null,null,null,null,"In this year's report, several questions have been rephrased, which is why there is no trend arrow for 2021 "]
[]
[]
[]
[null,null,null,null,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1]

{"sheet":"Ark8","index":1,"n_rows":68,"n_cols":315,"rows_kept":68,"cut":false,"hidden":true,"merged":[]}
[null,"AASEN SPAREBANK","AASEN SPAREBANK","AERA PAYMENT & IDENTIFICATION AS","AERA PAYMENT & IDENTIFICATION AS","ALEKTUM FINANS AS","ALEKTUM FINANS AS","ANDEBU SPAREBANK","ANDEBU SPAREBANK","Aprila Bank ASA","Aprila Bank ASA","ARENDAL OG OMEGNS SPAREKASSE","ARENDAL OG OMEGNS SPAREKASSE","ARVATO FINANCE AS","ARVATO FINANCE AS","AURSKOG SPAREBANK","AURSKOG SPAREBANK","Bambora Norge Nuf","Bambora Norge Nuf","BANK NORWEGIAN ASA","BANK NORWEGIAN ASA","BANK2 ASA","BANK2 ASA","BERG SPAREBANK","BERG SPAREBANK","BIEN SPAREBANK ASA","BIEN SPAREBANK ASA","BILL KILL AS","BILL KILL AS","BIRKENES SPAREBANK","BIRKENES SPAREBANK","BJUGN SPAREBANK (2)","BJUGN SPAREBANK (2)","BJUGN SPAREBANK","BJUGN SPAREBANK","BLAKER SPAREBANK","BLAKER SPAREBANK","BN BANK ASA","BN BANK ASA","BNP PARIBAS S.A. NORWAY BRANCH","BNP PARIBAS S.A. NORWAY BRANCH","BOLIGBANKEN ASA","BOLIGBANKEN ASA","BRAbank","BRAbank","BUYPASS PAYMENT AS","BUYPASS PAYMENT AS","CIRCLE K NORGE AS","CIRCLE K NORGE AS","CREDICARE AS","CREDICARE AS","CULTURA SPAREBANK","CULTURA SPAREBANK","DALMAR MONEY TRANSFER AS","DALMAR MONEY TRANSFER AS","DELTAGER AS","DELTAGER AS","DINTERO AS","DINTERO AS","DNB BANK ASA","DNB BANK ASA","DRANGEDAL SPAREBANK","DRANGEDAL SPAREBANK","EIDSBERG SPAREBANK","EIDSBERG SPAREBANK","EIKA KREDITTBANK AS","EIKA KREDITTBANK AS","ELAVON FINANCIAL SERVICES DAC,","ELAVON FINANCIAL SERVICES DAC,","ELEKT AS","ELEKT AS","ESPOS NORGE AS","ESPOS NORGE AS","ETNE SPAREBANK","ETNE SPAREBANK","ETNEDAL SPAREBANK (2)","ETNEDAL SPAREBANK (2)","ETNEDAL SPAREBANK","ETNEDAL SPAREBANK","EVJE OG HORNNES SPAREBANK (2)","EVJE OG HORNNES SPAREBANK (2)","Evje og Hornnes Sparebank","Evje og Hornnes Sparebank","Evry Card","Evry Card","FLEKKEFJORD SPAREBANK","FLEKKEFJORD SPAREBANK","Front Payment AS","Front Payment AS","Fundingpartner AS","Fundingpartner AS","Grong Sparebank","Grong Sparebank","Grue Sparebank (2)","Grue Sparebank (2)","Grue Sparebank","Grue Sparebank","HALTDALEN SPAREBANK","HALTDALEN SPAREBANK","Haugesund Sparebank","Haugesund Sparebank","HEGRA SPAREBANK (2)","HEGRA SPAREBANK (2)","HEGRA SPAREBANK","HEGRA SPAREBANK","HEMNE SPAREBANK","HEMNE SPAREBANK","HJARTDAL OG GRANSHERAD SPAREBANK","HJARTDAL OG GRANSHERAD SPAREBANK","HJELMELAND SPAREBANK","HJELMELAND SPAREBANK","Horde AS","Horde AS","HØLAND OG SETSKOG SPAREBANK","HØLAND OG SETSKOG SPAREBANK","INSTABANK ASA","INSTABANK ASA","JERNBANEPERSONALETS SPAREBANK","JERNBANEPERSONALETS SPAREBANK","JÆREN SPAREBANK","JÆREN SPAREBANK","KLP BANKEN AS","KLP BANKEN AS","KOMPLETT BANK ASA","KOMPLETT BANK ASA","KRAFT BANK ASA","KRAFT BANK ASA","KREDD AS","KREDD AS","KVINESDAL SPAREBANK","KVINESDAL SPAREBANK","LARVIKBANKEN","LARVIKBANKEN","LEDO PART OF SCHIBSTED AS","LENDO PART OF SCHIBSTED AS","LILLESANDS SPAREBANK","LILLESANDS SPAREBANK","LUSTER SPAREBANK","LUSTER SPAREBANK","MARITIME & MERCHANT BANK ASA","MARITIME & MERCHANT BANK ASA","Marker Sparebank","Marker Sparebank","MELHUS SPAREBANK","MELHUS SPAREBANK","MONIO AS","MONIO AS","MYBANK ASA","MYBANK ASA","NEONOMICS AS","NEONOMICS AS","NORDEA BANK ABP, FILIAL I NORGE","NORDEA BANK ABP, FILIAL I NORGE","Nordea Direct Bank ASA","Nordea Direct Bank ASA","NORDEA EIENDOMSKREDITT AS","NORDEA EIENDOMSKREDITT AS","NORDIC CORPORATE BANK ASA","NORDIC CORPORATE BANK ASA","NORGESGRUPPEN FINANS AS","NORGESGRUPPEN FINANS AS","NT SERVICES AS","NT SERVICES AS","NÆRINGSBANKEN ASA","NÆRINGSBANKEN ASA","OBOS FACTORING AS","OBOS FACTORING AS","OBOS-banken","OBOS-banken","Odal Sparebank","Odal Sparebank","ONESETTLE AS","ONESETTLE AS","OPDALS SPAREBANK","OPDALS SPAREBANK","ORKLA SPAREBANK","ORKLA SPAREBANK","OSLOFJORD SPAREBANK","OSLOFJORD SPAREBANK","PARETO BANK ASA","PARETO BANK ASA","PAYEX NORGE AS","PAYEX NORGE AS","RESURS BANK AB","RESURS BANK AB","RIA FINANCIAL SERVICES NORWAY AS","RIA FINANCIAL SERVICES NORWAY AS","RINDAL SPAREBANK","RINDAL SPAREBANK","ROMERIKE SPAREBANK","ROMERIKE SPAREBANK","ROMSDAL SPAREBANK","ROMSDAL SPAREBANK","RØROSBANKEN RØROS SPAREBANK","RØROSBANKEN RØROS SPAREBANK","SAFE DEPOSIT BANK OF NORWAY AS","SAFE DEPOSIT BANK OF NORWAY AS","SANDNES SPAREBANK","SANDNES SPAREBANK","SANTANDER CONSUMER BANK AS","SANTANDER CONSUMER BANK AS","SBANKEN ASA","SBANKEN ASA","SEB Kort Bank AB Oslofilialen Norsk Avdeling av Utenlandsk Foretak","SEB Kort Bank AB Oslofilialen Norsk Avdeling av Utenlandsk Foretak","SELBU SPAREBANK","SELBU SPAREBANK","SETTLE GROUP AS","SETTLE GROUP AS","SKAGERRAK SPAREBANK","SKAGERRAK SPAREBANK","SKANDINAVISKA ENSKILDA BANKEN AB (PUBL) OSLOFILIALEN","SKANDINAVISKA ENSKILDA BANKEN AB (PUBL) OSLOFILIALEN","SKUDENES & AAKRA SPAREBANK","SKUDENES & AAKRA SPAREBANK","SKUE SPAREBANK (2)","SKUE SPAREBANK (2)","SKUE SPAREBANK","SKUE SPAREBANK","SOGN SPAREBANK","SOGN SPAREBANK","SOKNEDAL SPAREBANK","SOKNEDAL SPAREBANK","SPAREBANK 1 GUDBRANDSDAL","SPAREBANK 1 GUDBRANDSDAL","SPAREBANK 1 HALLINGDAL VALDRES","SPAREBANK 1 HALLINGDAL VALDRES","SPAREBANK 1 HELGELAND","SPAREBANK 1 HELGELAND","SPAREBANK 1 KREDITT AS","SPAREBANK 1 KREDITT AS","SPAREBANK 1 LOM OG SKJÅK","SPAREBANK 1 LOM OG SKJÅK","SPAREBANK 1 MODUM","SPAREBANK 1 MODUM","SPAREBANK 1 NORD-NORGE","SPAREBANK 1 NORD-NORGE","SPAREBANK 1 NORDMØRE","SPAREBANK 1 NORDMØRE","SPAREBANK 1 SMN","SPAREBANK 1 SMN","SPAREBANK 1 SR-BANK ASA","SPAREBANK 1 SR-BANK ASA","SPAREBANK 1 SØRE SUNNMØRE","SPAREBANK 1 SØRE SUNNMØRE","SPAREBANK 1 SØRØST-NORGE","SPAREBANK 1 SØRØST-NORGE","SPAREBANK 1 ØSTFOLD AKERSHUS","SPAREBANK 1 ØSTFOLD AKERSHUS","SPAREBANK 1 ØSTLANDET","SPAREBANK 1 ØSTLANDET","SPAREBANK 68 GRADER NORD","SPAREBANK 68 GRADER NORD","Sparebanken Møre","Sparebanken Møre","SPAREBANKEN NARVIK (2)","SPAREBANKEN NARVIK (2)","Sparebanken Narvik","Sparebanken Narvik","SPAREBANKEN SOGN OG FJORDANE","SPAREBANKEN SOGN OG FJORDANE","SPAREBANKEN SØR","SPAREBANKEN SØR","Sparebanken Vest","Sparebanken Vest","SPAREBANKEN ØST","SPAREBANKEN ØST","Sparekillingsbanken","Sparekillingsbanken","STADSBYGD SPAREBANK","STADSBYGD SPAREBANK","STOREBRAND BANK ASA","STOREBRAND BANK ASA","STREX AS","STREX AS","STRØMMEN SPAREBANK","STRØMMEN SPAREBANK","SUNNDAL SPAREBANK","SUNNDAL SPAREBANK","SØGNE OG GREIPSTAD SPAREBANK","SØGNE OG GREIPSTAD SPAREBANK","TINN SPAREBANK","TINN SPAREBANK","TOLGA-OS SPAREBANK","TOLGA-OS SPAREBANK","TOTENS SPAREBANK","TOTENS SPAREBANK","TRØGSTAD SPAREBANK","TRØGSTAD SPAREBANK","Tysnes Sparebank","Tysnes Sparebank","VA FINANCE AS","VA FINANCE AS","VALDRES SPAREBANK","VALDRES SPAREBANK","Valle Sparebank","Valle Sparebank","VINA REMITTANCE EXPRESS AS","VINA REMITTANCE EXPRESS AS","VIPPS AS","VIPPS AS","VOSS SPAREBANK","VOSS SPAREBANK","Voss Veksel- og Landmandsbank ASA","Voss Veksel- og Landmandsbank ASA","ZDATA AS","ZDATA AS","ZTL PAYMENT SOLUTION AS","ZTL PAYMENT SOLUTION AS","Ørskog Sparebank","Ørskog Sparebank","ØSTRE AGDER SPAREBANK (2)","ØSTRE AGDER SPAREBANK (2)","ØSTRE AGDER SPAREBANK","ØSTRE AGDER SPAREBANK"]
["1.     Vi etterlever prinsippet om 3 Lines of Defence.   ","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L",null,null,null,"M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","H","M","L","S","M","S","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","M","S","M","S",null,null,"L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S",null,null,"L","M","M","S","L","S","L","S"]
["2.     Vi har en godt innarbeidet prosess for risikoanalyse. Ansatte er kjent med prosessen og bidrar aktivt og løpende inn i den.","L","S","L","M",null,null,"L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","M","M","M","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"M","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","M","L","S","L","S","L","S","M","M",null,null,"L","S","L","S","L","S","L","S","M","Ø","L","Ø","L","S","L","S","L","S","M","S","L","S","H","S","M","S","L","S","M","S","H","M","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","Ø","L","S","M","M","M","M","M","S","L","S","L","S"]
["3.     Vi har oversikt over virksomhetskritisk IKT-utstyr og programvare, inklusive lisenser. Vi har oversikt over gyldig konfigurasjon av tekniske løsninger.","L","S","L","S",null,null,"M","M","L","S","M","M","L","S","M","M","L","S","L","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","S","M","D","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","M","M",null,"M","S","M","M","L","S","M","M","M","M","M","M","M","M","L","S","L","S","L","S","L","S","M","M","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","L","S","M","M","L","S","M","M","M","M","L","S","L","S",null,null,"L","S","M","M","M","M","L","S","M","S","L","S","L","S","M","M","M","M","L","S","M","S","L","S","M","S","L","S","M","S","H","M","L","S","L","S","M","S",null,null,"M","Ø","M","M","L","S","M","M","M","M","M","M","L","S","L","S","M","S","L","S","M","M","M","M","M","M","M","M","L","S","M","M","H","M","M","S","L","S","L","S","L","S","M","M","L","S","L","S","M","M","M","M","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","M","L","S","L","S","M","M","M","M","L","S","M","M","M","S","L","S","L","S","L","S","L","S","L",null,"M","M","M","M","L","S","M","M","L","S","M","M","M","M","M","M","L","S","M","M","M","M","L",null,"L","S","L","S","M","M","M","M","L","M","M","S","M","M","M","M"]
["4.     Informasjon som grunnlag for å vurdere risiko samler vi inn systematisk og løpende. Informasjonen kan være analyser av avvik og hendelser, informasjon fra eksterne kilder, resultat av penetrasjonstesting, observasjoner fra kunder og ansatte.","M","S","L","M",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L",null,"M","S","L","S","M","M","L","S","L","S","L","S","M","M","M","S","L","S","M","S","L","S","L","S","L",null,"M","M","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"M","M","L","S","L","S","L","S","L","Ø","L","Ø","L","S","L","S","L","S","L","S","M","S","M","Ø","M","S","M","S","M","S","M","S","L","S","M","S","M","M",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","M","S","M","S","L","S","L","S","M","S","L","Ø","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","M","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","Ø","L","S","M","M","M","M","M","S","L","S","L","S"]
["5.     Ansatte har stillingsbeskrivelser. Ansattes ansvar når det gjelder kontroll og rapportering inngår i stillingsbeskrivelsen.","L","S","L","S",null,null,"L","S","L","S",null,null,"L","S","L","S","L","S","L","M","L",null,"L","S","L","S","M","S",null,null,"L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","M","L","S","M","S","L","S","L","S","L",null,"L","S","L","S","L","Ø","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S",null,null,"L","S","M","S","L","S","L","S","L","Ø","L","Ø","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","S","L","S","L","Ø","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","Ø","M","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L",null,"L","S","L","Ø","L","S","M","M","L","M","L","S","L","S","L","S"]
["6.     Vi har en prosess for utvikling og forbedring av a) rutiner for utvikling og drift og b) kontroll av at rutinene etterleves.","L","S","L","S",null,null,"L","S","L","M","L","S","L","S","L","S","M","S","M","M","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","M","M",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S"]
["7.     Utkontrakteringsavtalene sikrer oss rett til innsyn i alle forhold som gjelder leveransen.","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","M","M","Ø","L","S","M","M","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","M","M","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["8.     Vi har gode retningslinjer knyttet til sikkerhet. Vi gjør detaljert risikovurdering av betalingstjenestevirksomheten, og en beskrivelse av kontrollen med sikkerheten og tiltak for å beskytte brukerne av betalingstjenestene mot risikoene som er identifisert, inkludert svindel og ulovlig bruk av sensitive opplysninger og personopplysninger.","M","S","L","M",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","L",null,"M","Ø","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","M","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","L","S","M","S","M","S","M","S","M","M",null,null,"L","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","M","L","S","M","S","M","Ø",null,null,"M","S","M","S","M","S","M","S","M","S","M","S","M","Ø","L","S","M","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","Ø","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","Ø","L","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","L",null,"M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","M","M","S","M","S","M","M","M","M","M","S","M","S","M","S"]
["9.     Vi har god bestillerkompetanse, juridisk og teknisk. ","M","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L",null,"M","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","M","M","M","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","L","S","L","Ø","L","Ø","L","S","L","S","L","S","L","S","L","M","M","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","M","Ø","L","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","M","Ø","M","Ø","M","S","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","S","M","Ø","M","M","M","S","L","S","L","S","L","S","L","Ø","L","S","L","S","M","Ø","M","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","Ø","L","S","L","S","L","S","H","Ø","L","S","L","S"]
["10.  Vi har løpende oppfølging av våre leverandører og leveransene.","M","S","L","S",null,null,"L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L","M","L","S","L","S","M","M","L","Ø","L","Ø","L","S","L","S","L","S","M","S","L","S","L","S","M","D","M","M","M","M","L","S","L","S","M","S","M","S",null,null,"M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","M","S","M","M","M","S","L","S","L","S","L","M","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","Ø","M","S","M","S","M","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","Ø","M","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","Ø","L","S","L","S","M","M","L","S","L","S","L","S"]
["11.  Vi har en oversikt som viser hvilke kontroller vi bygger på innenfor hhv. førstelinjekontroll, risikostyring/etterlevelse og internrevisjon (de tre forsvarslinjer), brutt ned på områder som bidrar til å sikre integritet, konfidensialitet og tilgjengelighet. Hvem, og hvilket foretak, som er ansvarlig for å gjennomføre kontrollene inngår i oversikten.","M","S","M","M",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","M","M","L","S","M","Ø","L","S","M","S","M","S","M","S","M","S","L","M","L","S","L",null,null,null,"L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","M","M","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","M","L","S","L","S","M","S","M","S",null,null,"L","S","L","S","L","S","M","M","M","Ø","L","Ø","L","S","L","S","L","S","M","S","M","S","M","S","H","D","L","S","H","M","M","M","M","S","M","S","H","S",null,null,"M","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","M","S","L","S","L","S","L","S","L","Ø","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","L",null,"L","S","L","S","L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","L","Ø","L","S","L","S","M","M","L","S","L","S","L","S"]
["12.  Vi har fokus på bevisstgjøring av medarbeidere og opplæring av medarbeidere. ","L","S","L","S",null,null,"M","M","L","M","M","M","L","S","M","M","M","S","L","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","M","L",null,"L","S","M","S","M","S","L","S","M","S","L","S","M","M","L",null,"M","Ø","L","S","L","S","M","M","M","M","M","M","M","M","L","S","L","S","L","S","L","M","M","M","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","L","S","M","M","L","S","M","M","M","M","L","S","M","S",null,null,"L","S","M","M","M","M","L","S","L","S","L","S","L","S","M","M","M","M","L","Ø","M","S","L","M","L","S","L","S","L","S","M","M","L","S","M","S","M","M",null,null,"L","S","M","M","L","S","M","M","M","M","M","M","L","S","L","S","L","M","L","S","M","M","M","M","M","M","M","M","L","S","M","M","L","S","M","M","L","S","L","S","L","S","M","M","L","S","L","Ø","M","M","M","M","M","S","M","M","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","M","M","M","L","S","M","M","L","S","M","M","M","M","M","M","L","S","M","M","M","M","L",null,"L","S","L","S","M","M","L","S","M","M","M","S","M","M","M","M"]
["1.     IKT-systemene henter informasjon fra eksterne og interne kilder og sammenstiller og synkroniserer informasjonen til et bilde av foretakets risiko til bruk i styringsøyemed og til myndighetsrapportering.","L","S","L","S",null,null,"l","s","M","M","l","s","L","S","l","s","L","S","M","S","l","s","l","s","l","s","L","L","l","s","L","S","L","S","l","s","M","S","M","S","L","S","L","S","L","S","M","M","L","S","L","S",null,null,"M","M","M","S","L","S","L","S","L","S","l","s","L",null,null,null,"L","S","L","S","l","s","l","s","l","s","l","s","L","S","L","S","M","S","L","M","l","s","L","S","L","S","l","s","L","S","L","S","L","S","L","S","L","S","l","s","L","S","l","s","M","s","l","s","L","S","M","S","M","S",null,null,"L","S","l","s","l","s","L","S","L","S","L","S","l","s","l","s","l","s","L","Ø","L","M","L","S","M","S","L","S","M","S","L","S","L","S",null,null,"L","S",null,null,"M","S","l","s","M","S","l","s","l","s","l","s","L","S","L","S","L","S","L","S","l","s","l","s","l","s","l","s","L","S","l","s","L","S","M","S","L","S","L","S",null,null,"l","s","L","S","L","S","l","s","l","s","L","S","l","s","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","l","s","l","s","M","S","M","S","L","S","L","S","L","S","L","S","M","S","L",null,"l","s","l","s","L","S","l","s","L","S","l","s","l","s","l","s","L","S","l","s","l","s",null,null,"L","S","L","S","l","s","H","M","L","S","l","s","l","s","l","s"]
["2.     IKT-systemet gir automatisk et totalbilde av risikoen, for eksempel slik at hvis en hjørnestensbedrift går konkurs, så varsler systemet automatisk om lån til ansatte i bedriften og lån til leverandører til bedriften, slik at vi kan vurdere å tapsavskrive på disse.","M","S","M","M",null,null,"m","S","M","S","m","S","L","S","m","S","L","S","L","S","m","M","m","S","m","S","L","M","m","S","M","S","M","S","m","S","M","S","M","D","L",null,"L","S",null,null,"L","S",null,null,null,null,null,null,null,null,null,null,"L","S","M","S","M","S","m","S","L",null,null,null,"L","S","L","S","m","S","m","S","m","S","m","S",null,null,"L","S","L","S",null,null,"m","S","M","S","M","S","m","S","L","S","M","S","M","S","M","S","M","S","m","S",null,null,"m","S","L","S","m","S","M","S",null,null,"M","S",null,null,"L","S","m","S","m","S",null,"N","L","S","L","S","M","S","m","S","m","S",null,null,"M","S",null,null,"L","S","M","S","L","S","L","S","M","S",null,null,"L","M",null,null,"L","S","m","S","L","S","m","S","m","S","m","S","M","S","L","S","L","S","M","S","m","S","m","S","m","S","m","S",null,null,"m","S","L","S","L","S","L","S","M","S","L","S","m","S","L","S","L","S","m","S","m","S","L","S","m","S","L","S","M","S",null,"S","L","S","L","S","M","S","M","S","M","S","L","S",null,null,"L","S","L","S","L","S","M","S","M","S",null,null,"m","S","m","S","M","S","M","S","L","S","M","S",null,null,"M","S","M","S","L",null,"m","S","m","S","L","S","m","S","M","S","m","S","m","S","M","S","L","S","m","S","m","S",null,null,null,null,"L","S","m","S",null,null,null,null,"m","S","m","S","m","S"]
["3.     IKT-systemene reflekterer kundens evne til å betjene gjelden.","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S",null,null,"L","S",null,null,"L","S",null,null,null,null,null,null,"L","S","L","S","L","S","L","S","L",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S",null,null,"M","S","L","S","L","S",null,"N","L","S","L","S","M","S","L","S","L","S",null,null,"L","M",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,"S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S",null,null,null,null,"L","S","L","S",null,null,null,null,"L","S","L","S","L","S"]
["4.     Informasjonen i våre systemer og registre er korrekte (datakvalitet).","M","S","L","S",null,null,"M","S","M","M","M","S","L","S","M","M","L","S","M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","M","M","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","M","L","M","M","S","M","S","M","S","M","S","L",null,"L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","M","M","M",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","L","Ø","L","S","L","S","H","S","M","S","H","S","L","S","L","S",null,null,"M","M",null,null,"L","S","M","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","S","L","S","M","M","M","S","L","S","L","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S"]
["5.     Integrasjon mellom systemene skjer på en automatisert måte så langt det er mulig.","M","S","L","S",null,null,"M","M","L","S","M","M","L","S","M","M","L","S","L","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","M","S","L","S","L","S","M","S","M","S","M","M","M",null,"L","S","L","S","L","Ø","M","M","M","M","M","M","M","M",null,null,"L","Ø","L","S","L","M","M","M","M","M","M","M","M","M","L","Ø","M","M","M","M","M","M","M","M","M","M","L","S","M","M","L","S","M","M","M","M","L","M","M","M",null,null,"M","S","M","M","M","M","L","S","L","Ø","L","Ø","L","S","M","M","M","M","L","Ø","L","S","M","S","L","S","L","S","L","S","M","M","L","S",null,null,"M","M",null,null,"M","S","M","M","M","S","M","M","M","M","M","M","L","S","L","S","L","S","M","S","M","M","M","M","M","M","M","M","L","S","M","M","M","S","L","S","L","S","M","S","L","S","M","M","L","S","L","Ø","M","M","M","M","L","S","M","M","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","M","S","L","S","M","M","M","M","L","S","M","M","M","S","L","S","L","Ø","M","S","M","S","L",null,"M","M","M","M","L","Ø","M","M","M","S","M","M","M","M","M","M","M","M","M","M","M","M","L",null,"L","S","L","Ø","M","M","L","S","L","S","M","M","M","M","M","M"]
["6.     Omfanget av mangler og feil i systemene går ned.","M","S","M","M",null,null,"M","S","L","S","M","S","L","S","M","S","L","S","M","Ø","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S",null,null,"M","M","M","S","L","M","M","S","M","S","M","S","M",null,"M","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","M",null,null,"L","M","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","M","L","M","M","S","M","S","L","M","M","S","M","M","M","S",null,null,"M","S",null,null,"M","S","M","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","M","M","M","S","M","S","M","S","M","S","L","M","M","S","L","S","M","S","M","S","M","S",null,null,"M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","M","S","M","M","M","S","M","M","M","S","M","M","L","S","M","S","M","S","L","Ø","L","Ø","M","S","L","Ø","L","S","M","S","L","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","M","L","S","M","S","L","S","L","S","M","S","M","S","M","S"]
["7.     Vi samler inn statistiske opplysninger om drift, transaksjoner og svindel i betalingsformidlingstjenestene, og benytter informasjonen til å gjøre tjenestene sikrere.","M","S","L","S",null,null,"M","S","L","M","M","S","L","S","M","S","L","S","M","M","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S",null,null,"M","M","M","S","M","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","L","Ø","M","S","M","S","M","S","L","S","M","S","L","S","L","S",null,null,"M","S",null,null,"M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","L","S","M","S","M","S","M","Ø","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","Ø","L","S","L","Ø","L","S","L","S","M","S","L","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","L","S","M","S",null,null,"L","S","M","S","M","S","M","S"]
["8.     Vi vurderer fortløpende tiltak for å beskytte kunden, som at 1) kunden kan slå av funksjoner i betalingstjenesten (eksempelvis regionsperre, internettsperre), 2) kunden blir varslet (sms, e-post) når det skjer bevegelser på kundens kontoer / kort, eller ved avviste forsøk på tilgang til kundens kontoer / kort, 3) kunden har god tilgang til kundestøtte.","M","S","L","S",null,null,"M","S","L","S","M","S","M","S","M","S",null,null,"M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","M",null,null,null,null,null,null,"L","S","M","S","M","S","M","S",null,null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S",null,null,"M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S",null,null,"M","S",null,null,"M","S","M","S","L","S","M","S","M","S","M","S","L","S","L","S","L","M","M","M","M","S","M","S","M","S","M","S","L","S","M","M","L","S","L","Ø","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S",null,null,"M","S","M","S",null,null,"L","S","L","S","M","S",null,null,"L","S","M","S","M","S","M","S"]
["1.     Det er risiko knyttet til mangelfulle eller manglende rutiner for endringshåndtering og etterlevelse av rutiner. Hovedårsaken (root cause) til at feil oppstår blir ikke avdekket og/eller korrigert.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S",null,null,"L","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","M","Ø","L","S","M","S","L","S","L","S","L","S","M","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S"]
["2.     Når nye IT-løsninger skal utvikles, tar vi i betraktning behovene og løsningene til alle avdelinger som kan bli berørt. Dette for å unngå utfordringer forbundet med \"silo-løsninger\", slik som omfattende vedlikehold av programmer, komplisert drift og utfordringer med synkronisering av data.","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","M","L","S","L","S","L","S","L","S","M",null,"L","S","L","S","M","Ø","L","S","L","S","L","S","L","S",null,null,"M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","M","M","M","Ø","M","Ø","L","S","L","S","L","S","L","S","L","M","L","S","M","S","L","S","M","S","L","S","L","S",null,null,"L","S",null,null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","M","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","M","L","S","L","S","M","M","L","S","M","S","L","S","L","S","L","S","M","S","L",null,"L","S","L","S","M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","Ø","L","S","M","M","L","S","L","S","L","S","L","S"]
["3.     Test-systemene er \"produksjonslike\", dvs. at testdata (anonymiserte), applikasjoner, programvare, styresystemer (SW) og maskinvare er de samme i test som i produksjon.","M","M","L","S",null,null,"M","M","L","S","M","M","L","S","M","M","L","S","L","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","S","L","S","M","S","L","S","L","S","M","S","M","M","M","S","L","S","M","M","L","S","M","S","M","M","M","S","M","M","M",null,"L","S","L","S","L","S","M","M","M","M","M","M","M","M",null,null,"L","S","L","S","L","S","M","M","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","M","M","M","M","L","S","M","M","M","M","L","S","L","S",null,null,"L","M","M","M","M","M","L","S","L","S","L","S","L","S","M","M","M","M","M","S","M","M","M","S","M","S","L","S","M","S","H","M","L","S",null,null,"H","M",null,null,"M","S","M","M","L","S","M","M","M","M","M","M","L","S","L","S","M","S","L","S","M","M","M","M","M","M","M","M","L","S","M","M","M","S","M","S","L","S","M","M","L","S","M","M","L","S","L","S","M","M","M","M","L","S","M","M","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","M","M","M","M","M","L","S","M","S","L","S","L","S","M","M","M","S","L",null,"M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","L","S","M","M","M","M","L",null,"L","S","L","S","M","M","M","S","L","S","M","M","M","M","M","M"]
["4.     Vi gjør endringer i infrastrukturen (\"ikke-funksjonelle\" endringer) i trafikkstille perioder, og kan reversere endringen og rulle tilbake på kort tid hvis nødvendig.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S",null,null,"M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["5.     Før produksjonssetting utføres det sikkerhetstesting. Testingen gjøres av personer som ikke har vært involvert i utviklingen av tjenesten som testes.","M","S","L","S",null,null,"M","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","L","I","M","M","L","S","L","Ø","M","S","M","S","M","S","M",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S",null,null,"L","S","L","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","Ø","M","S","M","S","M","S","M","S","L","S","M","M",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","H","M","L","S",null,null,"H","M",null,null,"L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S","L","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","L","S","M","S","M","S","L","S","M","S","M","S","M","S"]
["6.     Vi gjør regelmessig tester for å teste sikkerheten i tjenestene våre. (Eks. penetrasjonstesting, testing etter TIBER standarden, sårbarhets-scanning).","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","M","M","L","S","L","S","L","S","L","S","H","I","M","M","M","M","M","S","L","S","L","S","L","S","M",null,"M","S","M","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"M","S","L","S","L","S","M","S","L","Ø","L","Ø","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S",null,null,"M","S",null,null,"M","S","L","S","M","S","L","S","L","S","L","S","M","Ø","L","S","H","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S",null,null,"L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","Ø","L","S","M","S","L","S","L","Ø","L","S","M","S","L",null,"L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","Ø","L","S","M","S","M","M","L","S","L","S","L","S"]
["7.     Det er høy grad av kompleksitet i IT-systemene.","M","S","M","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","M","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M",null,"L","S","L","S","L","Ø","M","S","M","S","M","S","M","S","L","S","L","Ø","M","M","L","S","M","S","M","S","M","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","M",null,null,"L","S","M","S","M","S","L","S","M","Ø","L","Ø","L","S","M","S","M","S","L","Ø","M","S","L","S","M","S","M","S","M","S","M","S","M","S",null,null,"L","S",null,null,"M","Ø","M","S","M","S","M","S","M","S","M","S","M","S","M","S","H","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","Ø","M","S","M","S","M","S","M","S","M","S","L","Ø","M","S","M","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","Ø","M","S","M","S","H","S","M","Ø","M","S","M","S","L","Ø","M","S","M","S","L",null,"M","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"M","S","M","Ø","M","S","M","S","L","S","M","S","M","S","M","S"]
["8.     Vi benytter i høy grad tiltak for å sikre oss mot angrep (Advanced Persistence Threat, trojaner, ransomware, DDoS, e-post angrep). Eksempler på tiltak: Intrusion Detection og Intrusion Prevention, brannmur, antivirus, kontroll av web-trafikk, sikring av e-post, patching og andre tiltak for å sikre stabil drift.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","M","S","M","S","L","S","L","S","L","S","M",null,"M","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","M","Ø","L","M","M","S","L","S","M","S","M","S","L","S",null,null,"M","S",null,null,"L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","M","M","Ø","M","I","L","S","L","S","L","S","M","I","M","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","Ø","M","Ø","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","M","Ø","L","Ø","M","S","M","M","M","Ø","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S"]
["9.     Vi benytter logging i utstrakt grad, og vi har et opplegg for å kunne reagere raskt og adekvat på \"unormale forhold\" i loggen.","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","M","M","S","L","S","L","S","L","S","M",null,"M","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","H","M",null,null,"L","S","L","S","L","S","M","M","M","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","M","I","M","S","M","Ø","M","S","L","S",null,null,"M","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","H","S","L","S","M","S","M","S","M","S","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S"]
["10.  Vi overvåker \"tikkende bomber\", dvs. komponenter som gradvis slites, eller verdier som gradvis når nivåer som krever inngrep, for eksempel minnelekkasje, sertifikater som går ut på dato, elektroniske komponenter som slites, energiforsyning som \"slites\" (batterier, brennstoff til nødstrøm-aggregat).","M","S","L","S",null,null,"M","M","M","M","M","M","L","S","M","M","L","S","L","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","M","S","M","M","M","S","M","S","M","M","M",null,"M","S","M","M","M","S","M","M","M","M","M","M","M","M","M","S","M","S","L","S","L","S","M","M","M","M","M","M","M","M","M","S","M","M","M","M","M","M","M","M","M","M","L","S","M","M","L","S","M","M","M","M","M","S","L","S",null,null,"L","S","M","M","M","M","L","S","M","S","M","S","L","S","M","M","M","M","L","S","L","S","L","S","L","D","M","M","L","M","M","S","L","S",null,null,"M","S",null,null,"M","S","M","M","L","S","M","M","M","M","M","M","L","S","L","S","H","S","L","S","M","M","M","M","M","M","M","M","L","S","M","M","M","S","M","S","L","S","M","S","L","S","M","M","L","S","M","S","M","M","M","M",null,null,"M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","M","M","L","Ø","M","S","M","S","L","S","L","S","M","S","M","S","L",null,"M","M","M","M","M","S","M","M","M","S","M","M","M","M","M","M","L","S","M","M","M","M",null,null,"L","S","M","S","M","M","M","S","L","S","M","M","M","M","M","M"]
["11.  Vi har gode tiltak for å avdekke avvik (unormal belastning, unormale porter/ protokoller, avvikende svarstider) i datatrafikken og ta aksjon før skade.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M",null,"M","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","M","H","M",null,null,"M","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S",null,null,"M","S",null,null,"M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","M","L","S","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S"]
["12.  Vi tester kriseløsningene våre i et omfang som gjør oss sikre på at de fungerer som forutsatt. ","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","H","S","M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"M","M","L","S","L","S","L","S","L",null,"M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","H","M","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","M","M","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","M","S","L","S","M","M","L","S",null,null,"M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","M","M","S","M","I","L","S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","L","S","M","M","L","S","L","S","L","S"]
["13.  Vi har gjort risikoanalyse, identifisert områder med høy risiko for nedetid (for eksempel Single Point of Failure) og satt in tiltak for å sikre kontinuerlig drift.","L","Ø","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","M","L","S","L","S","M","S",null,null,"M","M","L","Ø","L","S","M","S","L",null,"M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","M","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S","H","S","M","S","H","S","M","M","L","S",null,null,"M","S",null,null,"M","S","M","S","L","S","M","S","M","S","M","S","L","S","L","S","M","I","M","M","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","L","S","L","Ø","L","S","M","S","L","S","M","S","M","S","M","S",null,null,"M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","Ø","L","S","M","S","M","S","M","S","L","S","M","S","L","M","M","S","L","Ø","L","S","L",null,"M","S","M","S","M","S","M","S","L","Ø","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S"]
["14.  Samarbeidsrutinene og ansvarsforholdene mellom oss og leverandørene er presise og detaljerte.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","M","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S",null,null,"L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M",null,"L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["15.  Det er stort leveransepress. ","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","H","Ø","M","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","M","S",null,null,"M","M","L","S","L","S","L","S","L",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","H","M","L","S","L","S","L","S","L","S","M","S","M","M",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","H","S","M","S","H","S","M","S","L","S","L","S",null,null,"L","S",null,null,"M","Ø","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","H","I","M","S","L","S","L","S","L","S","L","S","L","S","L","Ø","M","S","M","Ø","L","S","L","S","L","S","L","S","M","I","M","S","L","S","L","S","L","S","L","S","M","Ø","M","Ø","M","Ø","L","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","M","M","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","M","Ø","L","S","L","S","L","S","L","S"]
["16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","M","S","L","S",null,null,"M","Ø","L","S","M","Ø","L","S","M","Ø","H","Ø","M","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","H","S","L","S","M","M","M","M","L","S","L","S","M","M","M","M","L","S","M","S",null,null,"M","Ø","M","S","M","Ø","M","Ø","L",null,null,null,"L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","Ø","L","S","L","M","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","S","M","Ø","M","Ø","L","S","L","S",null,null,"L","S","M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","S","M","Ø","M","Ø","L","Ø","M","S","H","Ø","L","S","M","S","L","S","M","S","L","S",null,null,"M","S",null,null,"L","S","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","S","H","I","L","S","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","S","M","Ø","M","I","M","S","L","S","M","Ø","M","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","Ø","M","Ø","L","S","M","S","M","Ø","M","S","M","S","M","S","L","S","L",null,"M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø",null,null,"L","S","M","Ø","M","Ø","L","S","L","S","M","Ø","M","Ø","M","Ø"]
["17.  Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift.","M","S","L","S",null,null,"M","M","L","S","M","M","L","S","M","M","M","M","L","S","M","M","M","M","M","M","L","M","M","M","M","M","M","M","M","M","M","S","L","S","L","S","M","M","M","S","L","S","M","M","L","S","L","S","M","M",null,null,"M","S","M","S","M","S","M","M","M",null,"L","S","L","S","M","Ø","M","M","M","M","M","M","M","M",null,null,"M","Ø","L","M","L","S","M","M","M","M","M","M","M","M","M","Ø","M","M","M","M","M","M","M","M","M","M","M","S","M","M","L","S","M","M","M","M","M","M","H","M",null,null,"L","S","M","M","M","M","L","S","M","Ø","M","Ø","L","S","M","M","M","M","L","Ø","L","S","M","Ø","L","S","M","S","M","S","L","S","L","S",null,null,"L","S",null,null,"M","M","M","M","L","S","M","M","M","M","M","M","L","S","M","S","M","S","M","S","M","M","M","M","M","M","M","M","L","S","M","M","M","S","M","Ø","M","S","M","S","L","S","M","M","L","S","M","Ø","M","M","M","M","L","S","M","M","M","S","M","S","M","M","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","M","M","M","M","S","L","S","M","S","L","S","M","S","M","S","L","S","L",null,"M","M","M","M","M","Ø","M","M","M","S","M","M","M","M","M","M","L","S","M","M","M","M",null,null,"M","M","M","Ø","M","M","M","M","L","S","M","M","M","M","M","M"]
["18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","M","Ø","L","S",null,null,"M","Ø","M","S","M","Ø","L","S","M","Ø","M","S","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","M","Ø",null,null,"M","S",null,null,"M","S","M","Ø","M","S","M","Ø","L",null,"M","Ø","M","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","L","S","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","Ø","H","S",null,null,"H","M","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","Ø","M","S","H","S","M","Ø","M","Ø","M","I","M","S","L","S",null,null,"M","S",null,null,"M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","Ø","H","Ø","M","S","M","S","M","S","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","S","M","M","L","S","M","Ø","L","S","M","Ø","M","I","M","Ø","M","Ø","M","Ø","M","S","M","Ø","H","S","H","S","H","S","M","Ø","H","S","H","S","H","S","H","S","H","S","H","S","H","S","H","S","H","S","H","S","M","Ø","M","Ø","M","Ø","M","Ø","H","Ø","M","S","M","S","M","Ø","M","S","M","Ø","H","S","L",null,"M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","L",null,"M","Ø","M","Ø","M","Ø","M","S","L","S","M","Ø","M","Ø","M","Ø"]
["19.  Vi har god oversikt over hvor datalinjene går. Vi har god redundans når det gjelder datalinjer.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","M",null,"L","S","M","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","M","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","H","S","M","S","L","S","L","S","M","M","L","S",null,null,"L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","I","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","I","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L",null,"L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["20.  Vi har gode rutiner for tilgangskontroll og adgangskontroll for egne ansatte, innleide og leverandører.","L","S","L","S",null,null,"L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","M","M","M","L","S","L","S","L","S","L","S","M","M","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"M","S","L","S","M","S","L","S","M",null,"L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","M","S","L","S","L","S","M","M","L","S","L","S","M","M","L","S","M","M","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","M","M","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","M","L","S","M","S","L","S","M","S","L","S","L","S",null,null,"M","M",null,null,"M","Ø","L","S","L","S","M","M","M","M","M","M","L","S","L","S","L","M","L","S","L","S","M","M","M","M","L","S","L","S","M","M","L","S","M","Ø","L","S","L","S",null,null,"M","M","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","M","M","L","S","M","S","L","S","L","S","M","S","L",null,"L","S","M","M","L","S","L","S","L","S","L","S","M","M","M","M","L","S","M","M","M","M","L",null,"L","S","L","S","M","M","L","S","L","S","M","M","L","S","L","S"]
["21.  Våre medarbeidere gjennomgår opplæring når det gjelder trusler og angrepsscenarier.","M","S","L","S",null,null,"M","Ø","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","M","M","L","S","L","S","M","S","L","S","L","S","L","S","M","S",null,null,"L","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","Ø","M","S","M","S","M","S","M","S","L","S","L","Ø","M","M","L","M","M","S","M","Ø","M","Ø","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S",null,null,"M","S","M","Ø","M","S","L","S","L","Ø","L","Ø","L","S","M","S","M","S","M","S","L","M","L","M","L","S","L","S","L","S","M","M","L","S",null,null,"M","M",null,null,"M","S","L","Ø","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","L","S","L","Ø","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S","M","S","M","M","L","Ø","M","S","L","S","L",null,"M","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S",null,null,"L","S","L","Ø","M","S","L","S","M","M","M","S","M","S","M","S"]
["22.  Grensesnittene som tredjeparter benytter for å få tilgang til betalingskontoer er testet og godkjent i samarbeid med tredjepartene. ","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S",null,null,"L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S",null,null,null,null,"L","S","L","S",null,null,null,null,"M","S","M","S","M","S","M","S",null,null,null,null,"L","S","L","Ø","M","S","M","S","M","S","M","S",null,null,"L","Ø","L","S",null,null,"M","S","M","S","M","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S",null,null,"M","S","L","S","M","S","M","S","L","Ø","L","S",null,null,"L","S","M","S","M","S",null,null,"L","Ø","L","Ø","M","S","M","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","H","M",null,null,null,null,"L","M",null,null,"M","Ø","M","S",null,null,"M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S",null," ","L","Ø","M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S","L","S","L",null,"M","S","M","S","L","Ø","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S",null,null,null,null,"L","Ø","M","S","L","S",null,null,"M","S","M","S","M","S"]
["23.  Grensesnittene som tredjeparter benytter er sikret i tråd med bestemmelsene i Delegert kommisjonsforordning (EU) 2018/389","L","S","L","S",null,null,"L","S","L","S","L","S","M","S","L","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","M",null,null,null,null,null,null,"M","S","L","S",null,null,null,null,"M","S","L","S","L","S","L","S",null,null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S",null,null,null,null,"L","S",null,null,"M","Ø","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,null,null,"L","S","L","S",null,null,null,null,"L","S","L","S","L","S"]
["1.     Vi har gode retningslinjer for klassifisering og beskyttelse av strukturert (databaser) og ustrukturert (word, e-post, personlige filområder) informasjon og beskyttelse av informasjonen.","M","S","L","S",null,null,"L","S","M","S","L","S","L","S","L","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","M","M","M","M","M","L","S","M","S",null,null,"M","S","M","S","M","S","L","S","L",null,"M","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S",null,null,"M","M","M","M","L","S","M","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","M","M","L","S","M","S","M","S",null,null,"M","Ø","M","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","M","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","S","M","S","M","S","M","M","L","S","M","S","M","S","L","S","L",null,"L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S"]
["2.     Vi har gode tilgangskontroller når det gjelder ansatte, konsulenter, leverandører, applikasjoners tilganger, systemtilganger, administratortilganger.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","M","M","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L",null,"M","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","M","S","L","Ø","M","S","L","S","L","S","L","S","L","S",null,null,"L","Ø","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","M","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","M","S","M","M","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["3.     Vi logger tilganger til data og systemer og vi kan skru på varsling dersom det forekommer uautorisert tilgang eller forsøk på tilgang.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","S",null,null,"M","M","L","S","L","S","L","S","L",null,"M","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","M",null,null,"L","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","M","S","L","S","L","S","M","S","L","S",null,null,"M","Ø","L","S","L",null,"L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","M","S","M","S","M","S","M","S","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","M","M","L","S","L","S","L","S","L","S"]
["4.     Vi har inndelt nettverket i sikkerhetssoner basert på en sikkerhetsgradering av data og funksjoner. Graderingen bestemmer fysisk og logisk (tilgangskontroller, kryptering mv.) sikring av data og funksjoner i sonen. ","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","D","L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","S",null,null,"M","S","L","S","L","S","L","S","L",null,"M","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","H","S","L","S","H","S","L","S","L","S","M","S","L","S",null,null,"M","S","L","S","L",null,"L","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","Ø","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S"]
["5.     Vi sikrer data på bærbart utstyr.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","M","L","S","M",null,"M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","M","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","Ø","L","S","L","S","L","S","L","S","M","S","L","S","L","S"]
["6.     Ved terminering av avtaler om datalagring må leverandøren dokumentere at data er fullstendig slettet.","L","S","L","S",null,null,"L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L",null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S",null,null,"L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S"]
["7.     Vi har rutiner for lagring og overvåkning av sensitiv betalingsinformasjon (informasjon som kan misbrukes til å begå svindel, f.eks. kortdetaljer og påloggingsinformasjon), samt begrensninger i og oversikt over adgang til denne informasjonen.","L","Ø","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","M",null,null,"L","S","L","Ø","L","S","L","S","M",null,null,null,"L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S",null,null,"M","S","M","Ø","L","S","L","S","L","S","M","S","L","S","M","S","M","S",null,null,"M","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","Ø","L","S","L",null,"L","S","L","S","M","S","L","S","L","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S"]
["1.     Vi har gode tiltak for å forhindre at en angriper tar over en bruker-ID og misbruker denne.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","Ø","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","M",null,null,"M","Ø","L","S","L","S","L","S","L",null,"L","S","M","M","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","Ø","M","M",null,null,"L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","L","S",null,null,"M","Ø","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","L","S","M","M","L","S","L","S","L","S","L","S","M","S","M","M","M","S","L","S","M","S","L",null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S","M","S","L","M","L","S","L","S","L","S"]
["2.     Vi har god kontroll når det gjelder utlevering, bruk og sletting av logon-id og passord til kunder. ","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","S",null,null,"L","Ø","L","S","L","S","L","S","M",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","L","S",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","L","S","L","S",null,null,"L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","Ø","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["3.     Vi benytter kontroller som forhindrer \"skimming\" og \"Card not present\"-svindel.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L",null,"L","M",null,null,"M","M",null,null,"L","S",null,null,null,null,null,null,"L","S","L","S","L","S","L","S","L",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"L","S",null,null,"M","D","L","S","M","M","L","S","L","S",null,null,"M","S",null,null,"L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","M","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","H","M","H","M","H","M","L","S","H","M","H","M","H","M","H","M","H","M","H","M","H","M","H","M","H","S","M","M","L","S","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L",null,"L","S","L","S","L","S",null,null,null,null,"L","S","L","S","L","S"]
["4.     Vi krever sterk kundeautentisering i forbindelse med betalinger for handel på internett.","L","S","L","S",null,null,"L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S",null,null,"L",null,"L","M","L","S","M","S",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","M",null,null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"L","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,"L","S",null,null,"L","Ø","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","M","M","L","S","L","S","L","S","M","D","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L",null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S"]
["1.     Vi har gjort en detaljert risikovurdering og definert mislighetsscenarier.","L","S","L","S",null,null,"M","S","L","S","M","M","L","S","M","S","M","S","L","S","M","S","L","S","M","M","L","S","M","M","M","M","M","M","M","S","M","S","L","S","M","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S",null,null,"M","S","L","S","M","S","M","S","L",null,"L","S","L","S","L","S","M","M","M","M","M","M","M","M","L","S","L","S","M","M","M","S","M","M","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","L","S","M","S","M","M","L","S","M","M","L","S","L","S","L","S",null,null,"L","S","M","M","M","M","L","S","M","S","M","S","M","S","M","M","M","M","M","S","M","S","H","S","M","Ø","M","S","M","Ø","M","M","L","S","M","S","M",null,null,null,"M","S","M","M","L","S","M","M","M","M","M","M","M","S","M","S","L","S","M","S","M","M","M","M","M","M","M","M","L","S","M","M","L","S","L","S","L","S","L","S","L","S","M","M","L","S","L","S","M","M","M","M","L","S","M","M","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S","M","M","M","M","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L",null,"M","S","M","S","L","S","M","M","L","S","M","S","M","M","M","M","L","S","M","M","M","M","L",null,"L","S","M","S","M","M","L","S","L","S","M","M","M","M","M","M"]
["2.     Vi benytter tjenestedeling (dual kontroll) så langt som mulig.","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S",null,null,"L","S","M","S","M","S","L","S","L",null,"M","S","M","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S","L","S","L","S","M","S","H","M",null,null,"M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L",null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S"]
["3.     Vi har etablert særskilt logging og varsling når det gjelder situasjoner, scenarier eller kontobevegelser der det etter risikovurderingen under pkt. 1 konkluderes med at det er sannsynlig at det kan skje misligheter. Dette kan være tilbakevaluteringer, bevegelser på interne kontoer, bevegelser på passive kontoer, overføring fra kunde til ansatt og tilbake, ansatte som er i en presset økonomisk situasjon, høy gjeldsgrad).","M","S","L","S",null,null,"L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","L","S","M","S","M","M",null,null,"M","S","M","S","M","S","M","S","L",null,null,null,"L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S",null,null,"M","S","L","S",null,null,"L","S","L","S","M","S",null,null,"M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","M","Ø","M","S","M","Ø","L","S","M","S","M","S","M","S",null,null,"M","S","M","M","M","S","M","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","L","S","L",null,"M","S","L","S",null,null,"M","S","M","S","L","S","M","S",null,null,null,null,"L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","L",null,"M","S","L","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","L","M","M","S",null,null,"L","S","M","S","L","M",null,null,"M","Ø","M","S"]
["4.     Vi overvåker ansattes egenhandel.","L","S","L","S",null,null,"L","S","L","S",null,null,"L","S","L","S",null,null,"L","M","L","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S",null,null,"L","S","L",null,"M","S",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"L","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","M","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S",null,null,"L","S","L","M",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","L","S",null,null,"L","S","L","S","M","S","L","S","L","S","L","S","L","S",null,null,"M","S","L","S","M","S","L","S",null," ","M","S","L","S",null,null,null,null,"L","S","L","S","M","S","L","S","L","S","M","S","M","S",null,null,"H","Ø","L","S","L","S","L",null,"M","S","L","S",null,null,null,null,"M","S",null,null,"L","S",null,null,null,null,null,null,"L","S","L","S","L","S","L","S",null,null,"M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S",null,null,"L","S","L","S","M","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S",null,null,"L","S","M","S","L",null,"L","S","L","M","L","S","L","S","L","S","L","S","M","S","M","S","L","S","L","M","L","S",null,null,null,null,"L","S","L","S",null,null,"L","S","L","S"]
["1.     Vi samarbeider med andre foretak for å få kartlagt midlenes opprinnelse og midlenes bruk. ","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S",null,null,"M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","M","D","L","S","l","s","L","S",null,null,"L","S","L","S",null,null,"M","S",null,null,"M","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S",null,null,"L","S","L","S","H","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S",null,null,"M","S","M","S","M","S",null,null,"L","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S",null,null,"M","S",null,null,"L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S",null,null,"M","S","M","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","M","S","L","M","L","S","L","S","M","S","L","S","L",null,"M","S","M","S","L","S","M","M","M","S","M","S","M","S","L","S","L","S","M","S","M","S","L",null,"L","S","L","S","M","S",null,null,"M","S","M","S","M","S","M","S"]
["2.     Våre IT-systemer gir et samlet bilde av kunde, kunderelasjoner og kundeadferd (KYC – Know Your Customer).","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","M","L","M","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","M","D","L","S","m","m","L","S","L","S","L","S","M","S","L","S","M","S","M","S","H","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","M","M",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","M","M","S","M","S","M","S","L","S","M","S","M","M","M","M","M","M","M","S","L","S","M","S","M","S",null,null,"L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","D","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","M","L","M","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","Ø","M","Ø","M","Ø","M","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","M","S","H","M","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","M","S","M","S",null,null,"M","S","M","S","M","S","M","S"]
["3.     Vi har elektronisk overvåking av transaksjoner og transaksjonsmønstre.","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","M","S","L","S","M","M","m","m","L","S","L","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S",null,null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","M",null,null,"M","S","M","S","M","S",null,null,"L","S","L","S","M","S","M","S","M","S","L","S","M","S","H","S","M","S","M","S","M","S","M","S","L","S",null,null,"M","S",null,null,"L","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","D","L","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","L","S","M","S",null,null,"L","M","M","S","M","S","M","S"]
["4.     Vi har en stadig bedre presisjon når det gjelder flagging av mistenkelige transaksjoner.","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","H","M","L","S","M","M","m","m","L","S","M","S","L","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","M","L",null,null,null,"L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","L","S","M","S","M","S","M","S","M","S",null,null,"L","S","M","M","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","H","S","M","M","M","M","M","M","M","S","L","S",null,null,"H","M",null,null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","M","L","M","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","L",null,"M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","M","S","M","S",null,null,"M","M","H","Ø","M","S","M","S"]
["5.     Det er en risiko for at transaksjonsovervåkingssystemet ikke fanger opp alle betalingstransaksjoner.","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","l","s","L","S","L","S",null,null,"M","S","L","S","M","S","L","M","M","S","M","S","M","M","M","S","L",null,null,null,"L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S",null,null,"L","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","Ø","M","S","H","S","H","M","M","M","H","M","M","S","M","S",null,null,"M","M",null,null,"M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","M","M","S","L","S","M","S","L","S","M","S","L","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","Ø","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","M","S","L",null,"M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"L","S","M","Ø","M","S",null,null,"L","S","M","S","M","S","M","S"]
["6.     AML-systemene benytter i utstrakt grad data fra øvrige systemer.","M","S","L","S",null,null,"M","S","L","S","M","S","L","S","M","S","H","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","D","L","S","m","s","L","S","M","S",null,null,"M","S","L","S","M","M","M","M","M","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","L","S","L","M","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","M","S","M","S","L","S","L","S","L","S","M","S","M","S","M","S","M","Ø","L","S","H","S","M","S","M","S","M","S","M","S","L","S",null,null,"M","S",null,null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","L","S","M","D","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","M","M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","S","L","S","M","S","M","M","M","M","M","M","L","S","M","M","M","M","M","M","M","M","M","M","M","S","M","M","M","M","M","M","M","S","M","S","M","S","M","S","M","S","L","S","L","S","M","M","L","S","L","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S",null,null,"L","S","L","S","M","S",null,null,"M","S","M","S","M","S","M","S"]
["7.     AML-systemene gjenkjenner mistenkelige mønstre over tid.","M","S","L","S",null,null,"M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","M","M","S","M","S","M","S","M","S","H","M","M","D","L","S","m","m","L","S","M","S",null,null,"M","S","L","S","M","S","M","M","M","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","M","S","M","S","M","S","M","S","L","S","L","S","M","M","H","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","M","S","M","S",null,null,"L","S","L","S","M","S","M","S","M","S","L","S","M","S","H","S","L","S","M","S","L","S","M","S","L","S",null,null,"M","S",null,null,"M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","M","L","S","L","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M","M","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","M","M","S","M","M","M","S","M","M","M","M","M","M","M","M","M","M","M","S","M","M","M","M","M","M","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S","M",null,"M","S","M","S","M","S",null,null,"L","S","M","S","M","S","M","S"]
["8.     AML-systemene fanger opp at en person har flere kundeforhold på tvers av forretningsenheter. ","M","S","L","S",null,null,"L","S","L","S","M","S","L","S","L","S","L","S",null,null,"M","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S",null,null,"L","D","L","S","l","s","L","S",null,null,null,null,null,null,null,null,"L","S",null,null,"M","S","M","S","L","S","H","S","L",null,null,null,"L","S","L","S","M","S","M","S","L","S","M","S",null,null,"L","S","M","S",null,null,"L","S","L","S","M","S","M","S","L","S","L","S","M","S","L","S","L","S","M","S",null,null,"L","S","L","S","L","S","L","S","L","S",null,null,null,null,"L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","M","S",null,null,"M","S","L","S","M","S","M","S",null,null,null,null,"M","S",null,null,null,null,"M","S","L","S","M","S","M","S","M","S","M","S","M","M","L","S",null,null,"L","S","M","S","M","S","L","S",null,null,"M","S","L","S","L","M","L","S","M","S","M","S","M","S","L","S","L","S","L","S","M","S",null,null,"L","S","M","Ø","M","Ø","M","Ø","L","S","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","Ø","M","S","M","S",null,null,"M","S","M","S","L","S","L","S","M","S","L","S",null,null,"M","S","M","S","L",null,"L","S","L","S","L","S","L","S","M","S","H","S","M","S","L","S","L","S","M","S","M","S","L",null,"L","S","L","S","M","S",null,null,"L","S","M","S","L","S","M","S"]
["9.     Sanksjonsscreeningssystem har høy presisjon i treff av listeførte personer og foretak. ","M","S","M","S",null,null,"M","S","L","S","L","S","L","S","M","S","M","S","L","M","L","S","L","S","M","S","L",null,"M","S","M","S","L","S","L","S","M","S","L","S","L","S","l","s","L","S","M","S",null,null,"L","S","L","S","M","M","M","S","M","S","M","S","M","S","M","S","L",null,null,null,"L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","L","M","M","S","M","S","L","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S","M","S","L","S","M","S","M","S","L","S","L","S",null,null,"L","S","L","S","M","S","L","S","L","S","L","S","M","M","M","S","M","S","L","S","M","S","M","S","M","S","M","S","M","S","M","S","L","S","M","S","M","S",null,null,"M","S","M","S","L","S","M","S","L","S","L","S","M","S","L","S","L","S","L","S","M","S","L","S","L","S","M","S","L","S","L","S","M","M","M","S","M","D","M","S","L","S","L","S","M","M","L","S","M","S","L","S","M","S","M","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","L","S","M","S","L","S","L","S","L","S","H","S","M","S","M","M","L","S","M","S","M","S","M","S","L",null,"M","S","M","S","L","S","M","S","M","S","M","S","L","S","M","S","L","S","L","S","L","S","L",null,"L","S","M","S","L","S",null,null,"L","S","L","S","M","S","L","S"]

{"sheet":"Ark4","index":2,"n_rows":137,"n_cols":169,"rows_kept":137,"cut":false,"hidden":true,"merged":[]}
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2021","Trend 2020"]
["Governance"]
["1.     Vi etterlever prinsippet om 3 Lines of Defence.   ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     Vi har en godt innarbeidet prosess for risikoanalyse. Ansatte er kjent med prosessen og bidrar aktivt og løpende inn i den.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Vi har oversikt over virksomhetskritisk IKT-utstyr og programvare, inklusive lisenser. Vi har oversikt over gyldig konfigurasjon av tekniske løsninger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
["4.     Informasjon som grunnlag for å vurdere risiko samler vi inn systematisk og løpende. Informasjonen kan være analyser av avvik og hendelser, informasjon fra eksterne kilder, resultat av penetrasjonstesting, observasjoner fra kunder og ansatte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["5.     Ansatte har stillingsbeskrivelser. Ansattes ansvar når det gjelder kontroll og rapportering inngår i stillingsbeskrivelsen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["6.     Vi har en prosess for utvikling og forbedring av a) rutiner for utvikling og drift og b) kontroll av at rutinene etterleves.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["7.     Utkontrakteringsavtalene sikrer oss rett til innsyn i alle forhold som gjelder leveransen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["8.     Vi har gode retningslinjer knyttet til sikkerhet. Vi gjør detaljert risikovurdering av betalingstjenestevirksomheten, og en beskrivelse av kontrollen med sikkerheten og tiltak for å beskytte brukerne av betalingstjenestene mot risikoene som er identifisert, inkludert svindel og ulovlig bruk av sensitive opplysninger og personopplysninger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["9.     Vi har god bestillerkompetanse, juridisk og teknisk. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["10.  Vi har løpende oppfølging av våre leverandører og leveransene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
["11.  Vi har en oversikt som viser hvilke kontroller vi bygger på innenfor hhv. førstelinjekontroll, risikostyring/etterlevelse og internrevisjon (de tre forsvarslinjer), brutt ned på områder som bidrar til å sikre integritet, konfidensialitet og tilgjengelighet. Hvem, og hvilket foretak, som er ansvarlig for å gjennomføre kontrollene inngår i oversikten.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
["12.  Vi har fokus på bevisstgjøring av medarbeidere og opplæring av medarbeidere. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
["Beslutningsstøtte"]
["1.     IKT-systemene henter informasjon fra eksterne og interne kilder og sammenstiller og synkroniserer informasjonen til et bilde av foretakets risiko til bruk i styringsøyemed og til myndighetsrapportering.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     IKT-systemet gir automatisk et totalbilde av risikoen, for eksempel slik at hvis en hjørnestensbedrift går konkurs, så varsler systemet automatisk om lån til ansatte i bedriften og lån til leverandører til bedriften, slik at vi kan vurdere å tapsavskrive på disse.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     IKT-systemene reflekterer kundens evne til å betjene gjelden.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["4.     Informasjonen i våre systemer og registre er korrekte (datakvalitet).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
["5.     Integrasjon mellom systemene skjer på en automatisert måte så langt det er mulig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
["6.     Omfanget av mangler og feil i systemene går ned.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["7.     Vi samler inn statistiske opplysninger om drift, transaksjoner og svindel i betalingsformidlingstjenestene, og benytter informasjonen til å gjøre tjenestene sikrere.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["8.     Vi vurderer fortløpende tiltak for å beskytte kunden, som at 1) kunden kan slå av funksjoner i betalingstjenesten (eksempelvis regionsperre, internettsperre), 2) kunden blir varslet (sms, e-post) når det skjer bevegelser på kundens kontoer / kort, eller ved avviste forsøk på tilgang til kundens kontoer / kort, 3) kunden har god tilgang til kundestøtte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
["Drift og beredskap"]
["1.     Det er risiko knyttet til mangelfulle eller manglende rutiner for endringshåndtering og etterlevelse av rutiner. Hovedårsaken (root cause) til at feil oppstår blir ikke avdekket og/eller korrigert.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     Når nye IT-løsninger skal utvikles, tar vi i betraktning behovene og løsningene til alle avdelinger som kan bli berørt. Dette for å unngå utfordringer forbundet med \"silo-løsninger\", slik som omfattende vedlikehold av programmer, komplisert drift og utfordringer med synkronisering av data.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Test-systemene er \"produksjonslike\", dvs. at testdata (anonymiserte), applikasjoner, programvare, styresystemer (SW) og maskinvare er de samme i test som i produksjon.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
["4.     Vi gjør endringer i infrastrukturen (\"ikke-funksjonelle\" endringer) i trafikkstille perioder, og kan reversere endringen og rulle tilbake på kort tid hvis nødvendig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["5.     Før produksjonssetting utføres det sikkerhetstesting. Testingen gjøres av personer som ikke har vært involvert i utviklingen av tjenesten som testes.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["6.     Vi gjør regelmessig tester for å teste sikkerheten i tjenestene våre. (Eks. penetrasjonstesting, testing etter TIBER standarden, sårbarhets-scanning).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["7.     Det er høy grad av kompleksitet i IT-systemene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["8.     Vi benytter i høy grad tiltak for å sikre oss mot angrep (Advanced Persistence Threat, trojaner, ransomware, DDoS, e-post angrep). Eksempler på tiltak: Intrusion Detection og Intrusion Prevention, brannmur, antivirus, kontroll av web-trafikk, sikring av e-post, patching og andre tiltak for å sikre stabil drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["9.     Vi benytter logging i utstrakt grad, og vi har et opplegg for å kunne reagere raskt og adekvat på \"unormale forhold\" i loggen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["10.  Vi overvåker \"tikkende bomber\", dvs. komponenter som gradvis slites, eller verdier som gradvis når nivåer som krever inngrep, for eksempel minnelekkasje, sertifikater som går ut på dato, elektroniske komponenter som slites, energiforsyning som \"slites\" (batterier, brennstoff til nødstrøm-aggregat).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
["11.  Vi har gode tiltak for å avdekke avvik (unormal belastning, unormale porter/ protokoller, avvikende svarstider) i datatrafikken og ta aksjon før skade.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["12.  Vi tester kriseløsningene våre i et omfang som gjør oss sikre på at de fungerer som forutsatt. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["13.  Vi har gjort risikoanalyse, identifisert områder med høy risiko for nedetid (for eksempel Single Point of Failure) og satt in tiltak for å sikre kontinuerlig drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
["14.  Samarbeidsrutinene og ansvarsforholdene mellom oss og leverandørene er presise og detaljerte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["15.  Det er stort leveransepress. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗","→"]
[]
["17.  Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
["18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗","↗"]
[]
["19.  Vi har god oversikt over hvor datalinjene går. Vi har god redundans når det gjelder datalinjer.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["20.  Vi har gode rutiner for tilgangskontroll og adgangskontroll for egne ansatte, innleide og leverandører.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
["21.  Våre medarbeidere gjennomgår opplæring når det gjelder trusler og angrepsscenarier.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["22.  Grensesnittene som tredjeparter benytter for å få tilgang til betalingskontoer er testet og godkjent i samarbeid med tredjepartene. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["23.  Grensesnittene som tredjeparter benytter er sikret i tråd med bestemmelsene i Delegert kommisjonsforordning (EU) 2018/389",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
["Beskytte data"]
["1.     Vi har gode retningslinjer for klassifisering og beskyttelse av strukturert (databaser) og ustrukturert (word, e-post, personlige filområder) informasjon og beskyttelse av informasjonen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     Vi har gode tilgangskontroller når det gjelder ansatte, konsulenter, leverandører, applikasjoners tilganger, systemtilganger, administratortilganger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Vi logger tilganger til data og systemer og vi kan skru på varsling dersom det forekommer uautorisert tilgang eller forsøk på tilgang.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["4.     Vi har inndelt nettverket i sikkerhetssoner basert på en sikkerhetsgradering av data og funksjoner. Graderingen bestemmer fysisk og logisk (tilgangskontroller, kryptering mv.) sikring av data og funksjoner i sonen. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["5.     Vi sikrer data på bærbart utstyr.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
["6.     Ved terminering av avtaler om datalagring må leverandøren dokumentere at data er fullstendig slettet.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["7.     Vi har rutiner for lagring og overvåkning av sensitiv betalingsinformasjon (informasjon som kan misbrukes til å begå svindel, f.eks. kortdetaljer og påloggingsinformasjon), samt begrensninger i og oversikt over adgang til denne informasjonen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
["Identitetstyveri"]
["1.     Vi har gode tiltak for å forhindre at en angriper tar over en bruker-ID og misbruker denne.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     Vi har god kontroll når det gjelder utlevering, bruk og sletting av logon-id og passord til kunder. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Vi benytter kontroller som forhindrer \"skimming\" og \"Card not present\"-svindel.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["4.     Vi krever sterk kundeautentisering i forbindelse med betalinger for handel på internett.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
["Intern bedrageri",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null," "]
["1.     Vi har gjort en detaljert risikovurdering og definert mislighetsscenarier.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
["2.     Vi benytter tjenestedeling (dual kontroll) så langt som mulig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Vi har etablert særskilt logging og varsling når det gjelder situasjoner, scenarier eller kontobevegelser der det etter risikovurderingen under pkt. 1 konkluderes med at det er sannsynlig at det kan skje misligheter. Dette kan være tilbakevaluteringer, bevegelser på interne kontoer, bevegelser på passive kontoer, overføring fra kunde til ansatt og tilbake, ansatte som er i en presset økonomisk situasjon, høy gjeldsgrad).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["4.     Vi overvåker ansattes egenhandel.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
["Hvitvasking"]
["1.     Vi samarbeider med andre foretak for å få kartlagt midlenes opprinnelse og midlenes bruk. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["2.     Våre IT-systemer gir et samlet bilde av kunde, kunderelasjoner og kundeadferd (KYC – Know Your Customer).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["3.     Vi har elektronisk overvåking av transaksjoner og transaksjonsmønstre.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["4.     Vi har en stadig bedre presisjon når det gjelder flagging av mistenkelige transaksjoner.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["5.     Det er en risiko for at transaksjonsovervåkingssystemet ikke fanger opp alle betalingstransaksjoner.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
["6.     AML-systemene benytter i utstrakt grad data fra øvrige systemer.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["7.     AML-systemene gjenkjenner mistenkelige mønstre over tid.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["8.     AML-systemene fanger opp at en person har flere kundeforhold på tvers av forretningsenheter. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
["9.     Sanksjonsscreeningssystem har høy presisjon i treff av listeførte personer og foretak. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]

{"sheet":"Grafer","index":3,"n_rows":168,"n_cols":164,"rows_kept":168,"cut":false,"hidden":true,"merged":[[49,4,49,160],[1,4,1,160],[26,2,26,67],[29,4,29,160],[45,4,45,160],[46,2,46,67],[129,4,129,160],[138,2,138,67],[141,4,141,160],[160,2,160,67],[96,2,96,67],[99,4,99,160],[113,4,113,160],[114,2,114,67],[117,4,117,160],[126,2,126,67]]}
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Vi etterlever prinsippet om 3 Lines of Defence.   ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"Vi har en godt innarbeidet prosess for risikoanalyse. Ansatte er kjent med prosessen og bidrar aktivt og løpende inn i den.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Vi har oversikt over virksomhetskritisk IKT-utstyr og programvare, inklusive lisenser. Vi har oversikt over gyldig konfigurasjon av tekniske løsninger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
[null,4,"Informasjon som grunnlag for å vurdere risiko samler vi inn systematisk og løpende. Informasjonen kan være analyser av avvik og hendelser, informasjon fra eksterne kilder, resultat av penetrasjonstesting, observasjoner fra kunder og ansatte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,5,"Ansatte har stillingsbeskrivelser. Ansattes ansvar når det gjelder kontroll og rapportering inngår i stillingsbeskrivelsen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,6,"Vi har en prosess for utvikling og forbedring av a) rutiner for utvikling og drift og b) kontroll av at rutinene etterleves.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,7,"Utkontrakteringsavtalene sikrer oss rett til innsyn i alle forhold som gjelder leveransen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,8,"Vi har gode retningslinjer knyttet til sikkerhet. Vi gjør detaljert risikovurdering av betalingstjenestevirksomheten, og en beskrivelse av kontrollen med sikkerheten og tiltak for å beskytte brukerne av betalingstjenestene mot risikoene som er identifisert, inkludert svindel og ulovlig bruk av sensitive opplysninger og personopplysninger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,9,"Vi har god bestillerkompetanse, juridisk og teknisk. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,10,"Vi har løpende oppfølging av våre leverandører og leveransene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
[null,11,"Vi har en oversikt som viser hvilke kontroller vi bygger på innenfor hhv. førstelinjekontroll, risikostyring/etterlevelse og internrevisjon (de tre forsvarslinjer), brutt ned på områder som bidrar til å sikre integritet, konfidensialitet og tilgjengelighet. Hvem, og hvilket foretak, som er ansvarlig for å gjennomføre kontrollene inngår i oversikten.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
[null,12,"12.  Vi har fokus på bevisstgjøring av medarbeidere og opplæring av medarbeidere. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"IKT-systemene henter informasjon fra eksterne og interne kilder og sammenstiller og synkroniserer informasjonen til et bilde av foretakets risiko til bruk i styringsøyemed og til myndighetsrapportering.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"IKT-systemet gir automatisk et totalbilde av risikoen, for eksempel slik at hvis en hjørnestensbedrift går konkurs, så varsler systemet automatisk om lån til ansatte i bedriften og lån til leverandører til bedriften, slik at vi kan vurdere å tapsavskrive på disse.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"IKT-systemene reflekterer kundens evne til å betjene gjelden.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,4,"Informasjonen i våre systemer og registre er korrekte (datakvalitet).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
[null,5,"Integrasjon mellom systemene skjer på en automatisert måte så langt det er mulig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
[null,6,"Omfanget av mangler og feil i systemene går ned.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,7,"Vi samler inn statistiske opplysninger om drift, transaksjoner og svindel i betalingsformidlingstjenestene, og benytter informasjonen til å gjøre tjenestene sikrere.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,8,"Vi vurderer fortløpende tiltak for å beskytte kunden, som at 1) kunden kan slå av funksjoner i betalingstjenesten (eksempelvis regionsperre, internettsperre), 2) kunden blir varslet (sms, e-post) når det skjer bevegelser på kundens kontoer / kort, eller ved avviste forsøk på tilgang til kundens kontoer / kort, 3) kunden har god tilgang til kundestøtte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Det er risiko knyttet til mangelfulle eller manglende rutiner for endringshåndtering og etterlevelse av rutiner. Hovedårsaken (root cause) til at feil oppstår blir ikke avdekket og/eller korrigert.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"Når nye IT-løsninger skal utvikles, tar vi i betraktning behovene og løsningene til alle avdelinger som kan bli berørt. Dette for å unngå utfordringer forbundet med \"silo-løsninger\", slik som omfattende vedlikehold av programmer, komplisert drift og utfordringer med synkronisering av data.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Test-systemene er \"produksjonslike\", dvs. at testdata (anonymiserte), applikasjoner, programvare, styresystemer (SW) og maskinvare er de samme i test som i produksjon.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
[null,4,"Vi gjør endringer i infrastrukturen (\"ikke-funksjonelle\" endringer) i trafikkstille perioder, og kan reversere endringen og rulle tilbake på kort tid hvis nødvendig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,5,"Før produksjonssetting utføres det sikkerhetstesting. Testingen gjøres av personer som ikke har vært involvert i utviklingen av tjenesten som testes.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,6,"Vi gjør regelmessig tester for å teste sikkerheten i tjenestene våre. (Eks. penetrasjonstesting, testing etter TIBER standarden, sårbarhets-scanning).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,7,"Det er høy grad av kompleksitet i IT-systemene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,8,"Vi benytter i høy grad tiltak for å sikre oss mot angrep (Advanced Persistence Threat, trojaner, ransomware, DDoS, e-post angrep). Eksempler på tiltak: Intrusion Detection og Intrusion Prevention, brannmur, antivirus, kontroll av web-trafikk, sikring av e-post, patching og andre tiltak for å sikre stabil drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,9,"Vi benytter logging i utstrakt grad, og vi har et opplegg for å kunne reagere raskt og adekvat på \"unormale forhold\" i loggen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,10,"Vi overvåker \"tikkende bomber\", dvs. komponenter som gradvis slites, eller verdier som gradvis når nivåer som krever inngrep, for eksempel minnelekkasje, sertifikater som går ut på dato, elektroniske komponenter som slites, energiforsyning som \"slites\" (batterier, brennstoff til nødstrøm-aggregat).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
[null,11,"Vi har gode tiltak for å avdekke avvik (unormal belastning, unormale porter/ protokoller, avvikende svarstider) i datatrafikken og ta aksjon før skade.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,12,"Vi tester kriseløsningene våre i et omfang som gjør oss sikre på at de fungerer som forutsatt. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,13,"Vi har gjort risikoanalyse, identifisert områder med høy risiko for nedetid (for eksempel Single Point of Failure) og satt in tiltak for å sikre kontinuerlig drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
[null,14,"Samarbeidsrutinene og ansvarsforholdene mellom oss og leverandørene er presise og detaljerte.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,15,"Det er stort leveransepress. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,16,"Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗","→"]
[]
[null,17,"Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","→"]
[]
[null,18,"Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗","↗"]
[]
[null,19,"Vi har god oversikt over hvor datalinjene går. Vi har god redundans når det gjelder datalinjer.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,20,"Vi har gode rutiner for tilgangskontroll og adgangskontroll for egne ansatte, innleide og leverandører.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
[null,21,"Våre medarbeidere gjennomgår opplæring når det gjelder trusler og angrepsscenarier.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,22,"Grensesnittene som tredjeparter benytter for å få tilgang til betalingskontoer er testet og godkjent i samarbeid med tredjepartene. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,23,"Grensesnittene som tredjeparter benytter er sikret i tråd med bestemmelsene i Delegert kommisjonsforordning (EU) 2018/389",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Vi har gode retningslinjer for klassifisering og beskyttelse av strukturert (databaser) og ustrukturert (word, e-post, personlige filområder) informasjon og beskyttelse av informasjonen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"Vi har gode tilgangskontroller når det gjelder ansatte, konsulenter, leverandører, applikasjoners tilganger, systemtilganger, administratortilganger.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Vi logger tilganger til data og systemer og vi kan skru på varsling dersom det forekommer uautorisert tilgang eller forsøk på tilgang.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,4,"Vi har inndelt nettverket i sikkerhetssoner basert på en sikkerhetsgradering av data og funksjoner. Graderingen bestemmer fysisk og logisk (tilgangskontroller, kryptering mv.) sikring av data og funksjoner i sonen. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,5,"Vi sikrer data på bærbart utstyr.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↗"]
[]
[null,6,"Ved terminering av avtaler om datalagring må leverandøren dokumentere at data er fullstendig slettet.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,7,"Vi har rutiner for lagring og overvåkning av sensitiv betalingsinformasjon (informasjon som kan misbrukes til å begå svindel, f.eks. kortdetaljer og påloggingsinformasjon), samt begrensninger i og oversikt over adgang til denne informasjonen.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Vi har gode tiltak for å forhindre at en angriper tar over en bruker-ID og misbruker denne.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"Vi har god kontroll når det gjelder utlevering, bruk og sletting av logon-id og passord til kunder. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Vi benytter kontroller som forhindrer \"skimming\" og \"Card not present\"-svindel.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,4,"Vi krever sterk kundeautentisering i forbindelse med betalinger for handel på internett.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null," "]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Vi har gjort en detaljert risikovurdering og definert mislighetsscenarier.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↘","↘"]
[]
[null,2,"Vi benytter tjenestedeling (dual kontroll) så langt som mulig.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Vi har etablert særskilt logging og varsling når det gjelder situasjoner, scenarier eller kontobevegelser der det etter risikovurderingen under pkt. 1 konkluderes med at det er sannsynlig at det kan skje misligheter. Dette kan være tilbakevaluteringer, bevegelser på interne kontoer, bevegelser på passive kontoer, overføring fra kunde til ansatt og tilbake, ansatte som er i en presset økonomisk situasjon, høy gjeldsgrad).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,4,"Vi overvåker ansattes egenhandel.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[null,null,"Sårbarhet",null,"Foretakenes svar",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Trend 2020","Trend 2021"]
[null,1,"Vi samarbeider med andre foretak for å få kartlagt midlenes opprinnelse og midlenes bruk. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,2,"Våre IT-systemer gir et samlet bilde av kunde, kunderelasjoner og kundeadferd (KYC – Know Your Customer).",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,3,"Vi har elektronisk overvåking av transaksjoner og transaksjonsmønstre.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,4,"Vi har en stadig bedre presisjon når det gjelder flagging av mistenkelige transaksjoner.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,5,"Det er en risiko for at transaksjonsovervåkingssystemet ikke fanger opp alle betalingstransaksjoner.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]
[]
[null,6,"AML-systemene benytter i utstrakt grad data fra øvrige systemer.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,7,"AML-systemene gjenkjenner mistenkelige mønstre over tid.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,8,"AML-systemene fanger opp at en person har flere kundeforhold på tvers av forretningsenheter. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,9,"Sanksjonsscreeningssystem har høy presisjon i treff av listeførte personer og foretak. ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","→"]
[]
[null,null,"Grønt: lav sårbarhet. Gult: middels sårbarhet. Rødt: høy sårbarhet. Hvit: i/a."]
[]
[]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"↗"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"→","↘"]

{"sheet":"srep","index":4,"n_rows":11,"n_cols":18,"rows_kept":11,"cut":false,"hidden":true,"merged":[]}
["BANK2 ASA","BJUGN SPAREBANK","BLAKER SPAREBANK","CULTURA SPAREBANK","Grue Sparebank","JERNBANEPERSONALETS SPAREBANK","OBOS-banken","OSLOFJORD SPAREBANK","PARETO BANK ASA","SKUDENES & AAKRA SPAREBANK","SOKNEDAL SPAREBANK","SPAREBANK 1 NORDMØRE","SPAREBANKEN ØST","SUNNDAL SPAREBANK","SØGNE OG GREIPSTAD SPAREBANK","TOLGA-OS SPAREBANK","TOTENS SPAREBANK","VOSS SPAREBANK"]
["16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","11.  Vi har en oversikt som viser hvilke kontroller vi bygger på innenfor hhv. førstelinjekontroll, risikostyring/etterlevelse og internrevisjon (de tre forsvarslinjer), brutt ned på områder som bidrar til å sikre integritet, konfidensialitet og tilgjengelighet. Hvem, og hvilket foretak, som er ansvarlig for å gjennomføre kontrollene inngår i oversikten.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","3.     Vi har oversikt over virksomhetskritisk IKT-utstyr og programvare, inklusive lisenser. Vi har oversikt over gyldig konfigurasjon av tekniske løsninger.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","8.     Vi har gode retningslinjer knyttet til sikkerhet. Vi gjør detaljert risikovurdering av betalingstjenestevirksomheten, og en beskrivelse av kontrollen med sikkerheten og tiltak for å beskytte brukerne av betalingstjenestene mot risikoene som er identifisert, inkludert svindel og ulovlig bruk av sensitive opplysninger og personopplysninger.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","8.     Vi har gode retningslinjer knyttet til sikkerhet. Vi gjør detaljert risikovurdering av betalingstjenestevirksomheten, og en beskrivelse av kontrollen med sikkerheten og tiltak for å beskytte brukerne av betalingstjenestene mot risikoene som er identifisert, inkludert svindel og ulovlig bruk av sensitive opplysninger og personopplysninger.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","2.     Når nye IT-løsninger skal utvikles, tar vi i betraktning behovene og løsningene til alle avdelinger som kan bli berørt. Dette for å unngå utfordringer forbundet med \"silo-løsninger\", slik som omfattende vedlikehold av programmer, komplisert drift og utfordringer med synkronisering av data.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.","2.     Når nye IT-løsninger skal utvikles, tar vi i betraktning behovene og løsningene til alle avdelinger som kan bli berørt. Dette for å unngå utfordringer forbundet med \"silo-løsninger\", slik som omfattende vedlikehold av programmer, komplisert drift og utfordringer med synkronisering av data."]
["18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","7.     Det er høy grad av kompleksitet i IT-systemene.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","6.     Vi gjør regelmessig tester for å teste sikkerheten i tjenestene våre. (Eks. penetrasjonstesting, testing etter TIBER standarden, sårbarhets-scanning).","17.  Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift.","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","9.     Vi har god bestillerkompetanse, juridisk og teknisk. ",null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.",null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.","7.     Det er høy grad av kompleksitet i IT-systemene."]
[null,null,null,null,"21.  Våre medarbeidere gjennomgår opplæring når det gjelder trusler og angrepsscenarier.",null,"15.  Det er stort leveransepress. ",null,"15.  Det er stort leveransepress. ","18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,"14.  Samarbeidsrutinene og ansvarsforholdene mellom oss og leverandørene er presise og detaljerte.",null,null,"17.  Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift.",null,null,"16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene."]
[null,null,null,null,null,null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,"16.  Det er ikke tilstrekkelig tilgang på kompetanse, herunder kompetanse til å stille krav til leverandører og følge opp leveransene.",null,null,"15.  Det er stort leveransepress. ",null,null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,null,"17.  Stor \"teknisk gjeld\" gir oss unødig risiko når det gjelder endringshåndtering og når det gjelder drift."]
[null,null,null,null,null,null,"20.  Vi har gode rutiner for tilgangskontroll og adgangskontroll for egne ansatte, innleide og leverandører.",null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre.",null,null,"1.     Vi har gode tiltak for å forhindre at en angriper tar over en bruker-ID og misbruker denne.",null,null,null,null,null,"18.  Mange nye regulatoriske krav gjør at vi stadig må endre systemene våre."]
[null,null,null,null,null,null,"22.  Grensesnittene som tredjeparter benytter for å få tilgang til betalingskontoer er testet og godkjent i samarbeid med tredjepartene. ",null,null,null,null,"2.     Våre IT-systemer gir et samlet bilde av kunde, kunderelasjoner og kundeadferd (KYC – Know Your Customer).",null,null,null,null,null,"5.     Det er en risiko for at transaksjonsovervåkingssystemet ikke fanger opp alle betalingstransaksjoner."]
[null,null,null,null,null,null,"23.  Grensesnittene som tredjeparter benytter er sikret i tråd med bestemmelsene i Delegert kommisjonsforordning (EU) 2018/389",null,null,null,null,"3.     Vi har elektronisk overvåking av transaksjoner og transaksjonsmønstre."]
[null,null,null,null,null,null,"1.     Vi har gode retningslinjer for klassifisering og beskyttelse av strukturert (databaser) og ustrukturert (word, e-post, personlige filområder) informasjon og beskyttelse av informasjonen.",null,null,null,null,"8.     AML-systemene fanger opp at en person har flere kundeforhold på tvers av forretningsenheter. "]
[null,null,null,null,null,null,"3.     Vi logger tilganger til data og systemer og vi kan skru på varsling dersom det forekommer uautorisert tilgang eller forsøk på tilgang."]
[null,null,null,null,null,null,"1.     Vi har gode tiltak for å forhindre at en angriper tar over en bruker-ID og misbruker denne."]