What's in effect now?
The Norwegian Digital Security Act (digitalsikkerhetsloven) took effect on October 1, 2025, and implements the original NIS Directive in Norwegian law. The requirements are expected to expand with the EU's NIS2 Directive, which will apply to far more organizations than are covered today.
How Microsoft 365 helps
The requirements largely center on risk management, security measures, incident response, and documentation. Microsoft Defender provides visibility into threats and incidents, Microsoft Purview provides audit logs and control over sensitive information, and Entra ID manages identities and access. That's a solid foundation – but the tools have to be configured and actively managed.
What we recommend
- Find out whether your organization is covered now or will be under NIS2
- Identify which security features are in use
- Make sure logging and audit trails are turned on
- Establish incident response procedures
How we can help
Wondering what this means for your organization? Let's talk.
Request a meeting →