Organisational security for private and public organisations

Most organisations spend considerable resources trying to understand the threat picture. Start with measures that work.

ORGSEC is the measure for the whole organisation: mapping, knowledge, exercises and training, delivered online in a managed process, with the documentation that will be asked for.

Since 2008Delivered onlineNorwegian, for the Nordics

What ORGSEC is

The service

An annual subscription, not a project

ORGSEC was developed in Norway in 2008 and first used in the Norwegian Government Quarter after the attacks of 22 July 2011, where our specialists delivered competence development in communication, conflict management and crisis management over several years.

Today it is a digital platform sold as an annual subscription. The organisation does not need to design its own concepts, seminars or training days: the year is laid out in advance, every employee takes part, and the documentation is produced as the work is done.

The pages describing the service in detail are in Norwegian. Write to us in English and we will answer in English.

Programmes, exercises and training

Twelve programmes for employees

Each programme opens with a mapping in which employees report their own experience, anonymously. The learning module follows. One programme a month, through the year.

Digital tabletop for the leadership group

The leadership group meets the same scenario three times with increasing pressure, online, led by a specialist. Learning, not assessment. No travel.

Simulation game for employees

The individual stands in an incident drawn from the programmes and makes the decisions at the pace the incident demands, again and again, under increasing pressure.

The ORGSEC network

Members know each other before anything happens.

The method is built to support joint response across organisations.

Subscribing organisations are members of the ORGSEC network and are invited to network gatherings. There they contribute their own expertise to building cooperation within their region or their sector, so that those who may need to support one another already know each other.

Twelve programmes, one a month

Month 1Security culture
Month 2Digital threats
Month 3Privacy and information handling
Month 4Artificial intelligence at work
Month 5Physical security, fire and evacuation
Month 6Violence and threats
Month 7Harassment online and personal security
Month 8Workplace harassment
Month 9Whistleblowing
Month 10Insider risk and personnel security
Month 11Influence and disinformation
Month 12Preparedness: your role when something happens

All twelve are for every employee. The order is set at the start of the year, based on the regulations the organisation is subject to and what the initial mapping shows.

Three steps to a year that runs itself

Step 1

Agreement

Tell us how many employees need access. You receive a proposal and an agreement by e-mail, without a meeting.

Step 2

Online start

The leadership group sets the values to be protected in one 90-minute session online. The plans are reviewed, the order of the programmes is set, and every employee receives a login.

Step 3

The year runs

One programme a month for employees, three tabletop exercises for the leadership group, feedback per risk area, and the annual report in month twelve.

What it looks like after a year

The analysisOn the table before the board meeting, with the incidents that could occur, the risk they represent, and the measures carried out.
The employeesHold certificates for what the law requires, and know whom to alert and what to do when the alarm sounds.
The leadership groupHas worked through the same scenario three times under increasing pressure, and knows who does what.
The supervisory authorityQuestions are answered with documentation rather than assurances.
Get in touch

Describe your situation, and we will tell you how we can help.

Write to us at post@orgsec.no. We answer by e-mail, and no meeting is required.

Write to us