KVAL: Diri - Digitized Intelligent Risk Identification

DIRI - Digitized Intelligent Risk Identification According to the European Confederation of Institutes of Internal Auditing (ECIIA), cybersecurity is the single biggest risk organizations are likely to face over the next years. Worldwide spending on information security products and services exceeded $114 billion in 2018 and the numbers are expected to grow. There are few appropriate tools for managing cyber risk in the market today, and the ones that exist are made for companies with in-house expertise and competence. The Diri project and spin-off company is based on research from the Department of Information and Communication (IIK), the Center of Cyber and Information Security (CCIS) and Gaute Wangen's Ph.D. thesis. Diri is a module based and user-friendly tool for estimating cyber risk for all organizations. It is a self-service solution that will help companies discover and understand their exposure to and the potential cost of cyber risks. The software will suggest risk reducing actions and the cost of not taking them. The market is global, but we are piloting in Norway and several companies have already shown interest in the solution. Risk management of information security is considered a discipline that requires deep technological insight. At the same time being able to judge risks in the cyber domain is crucial to thrive in the modern business environment. The aim of DIRI is to make cyber risk assessment available for all organizations, especially small and medium sized enterprises (SMEs) and reduce the need for expertise.

Diri vil hjelpe kundene med å etablere risikostyring og redusere risiko fra cybersikkerhet. I prosjektfasen har vi oppnådd følgende mål: Vi har redusert risiko for datatap og data på avveie fra vår side ved å sikre en MvP som er klar for pilotering: - Vi har etablert infrastruktur for Diri programvaren - Sikret infrastrukturen og etablert drift - Gjennomført penetrasjonstest av løsningen. - Compliance til beste praksis for Microsoft Azure SaaS-tjenester. Videre har vi etablert dialog med flere mulige pilotkunder. Vi har også levert tilbud på offentlig utlysning.