Compliance work
“Regulations such as NIS2 and DORA are raising the bar for how organisations approach security, risk management and governance. For many organisations, this means increased requirements for structure, documentation and follow-up, but also an opportunity to strengthen their resilience against cyber threats and other disruptions.
In the long term, it is not only about compliance, but about building robust and sustainable organisations that inspire greater trust among customers, partners and society as a whole,” says Johanna Breivik, Head of Compliance and Interim CISO at Orange Business.
More resources for security and compliance
With the introduction of regulations such as NIS2 and DORA, which aim to protect against cyber threats and strengthen security, the banking and finance sector faces the challenge of allocating more resources to compliance. NIS2 and DORA mean that compliance work now requires more resources than before, and there is a risk that focus may shift away from core operational activities.
“NIS2 and DORA bring increased requirements, but also an opportunity to build stronger, more secure and more resilient organisations,” says Johanna.
Sustainable security and digital transformation go hand in hand
At the same time as security challenges are escalating, we are experiencing a period of rapid technological development. Organisations that innovate in isolation struggle to keep pace with advances in cloud solutions, while those that fail to take advantage of available digital technologies expose themselves to significant business risks.
“The most successful organisations do not choose between innovation and security. They build both at the same time,” says Johanna.
“Security and innovation are not mutually exclusive”
Decisions aligned across the organisation
Increasing cyber risks and more stringent regulations and are making it increasingly challenging to align security and compliance with broader business operations. To succeed, organisations need to understand how security and business objectives are connected.
A key part of this is building bridges between different areas of the organisation, such as finance, management and IT. At the same time, it is becoming increasingly important to maintain full visibility and control over data and business assets – understanding which data needs to be protected, who should have access to it, and how the organisation can maximise its value securely.
Simplified compliance management
Preventing shadow IT and ensuring that security solutions are aligned with business objectives are essential for building a sustainable, long-term approach to security. By assessing the organisation’s security maturity and working systematically in accordance with international standards such as ISO 27001 or NIST CSF, organisations can establish a solid foundation for their security efforts. A standardised model provides a clear structure, making it easier to monitor, document and communicate security activities across the organisation.
At the same time, a unified approach across the entire security lifecycle can help improve efficiency. By integrating everything from advisory services and preventive measures to detection and response, governance, reporting and documentation become easier to manage. This creates better conditions for meeting increasingly stringent security and compliance requirements, while allowing the organisation to focus more on business development and less on administrative burden.
Written in collaboration with
Johanna Nord Breivik
Johanna Nord Breivik has more than 20 years of experience in security, risk management, information security and regulatory compliance. In her role as Head of Compliance and Interim CISO at Orange Business Nordics, she is responsible for areas including information security, risk management, privacy, quality, ESG and governance.
She works closely with the business to translate requirements and risks into practical approaches that support business objectives. Johanna is passionate about making security, risk management and compliance enablers of innovation, digital transformation and sustainable growth.