WEBVTT

00:00.000 --> 00:05.000
[Automatic captions by Autotekst using NB Whisper. May contain recognition errors.]

00:05.026 --> 00:32.176
Hello, my name is St?le. I work with IT and information security at the University of Oslo. Information security is important both for you as a private person, but also for all possible public enterprises and companies. But what is this really about? And what should you know? And what should you do? And what shouldn't you do? Yes, this is really mostly about making sly choices. It is a bit about IT and data security.

00:32.193 --> 00:56.476
But mostly about you and everyone else, and me, having to make sly choices every day. Because we all have, or manage, information that is important to us or our job. It can be information that is secret, private or valuable. Or things that not everyone should see. And often these are documents or files that are stored in various computer systems.

00:57.295 --> 01:24.667
Most of us realize that it is important to have control over this information. And your job may be responsible for some of this, perhaps more than you think. But what are we really trying to avoid and choose to pay attention to? Yes, there are mainly three things. One is the confessionality. This means that we do not want our information to end up astray.

01:25.316 --> 01:53.456
Access it by mistake and suddenly see it. It can be a nude picture that is spread on Snap. Or it can be sensitive, highly private health information that you manage in your job. On behalf of others, perhaps. And which is made available on the Internet by mistake. It can also be research data or business secrets which are subject to strict export control. Which is seen by the person in question because you made a mistake in the settings on a website.

01:54.667 --> 02:20.435
This is sometimes very unpleasant or embarrassing for you. Other times there is one or more offenses that can have serious consequences for you or your job. And your job could end up in the newspaper. It has happened to my job several times. Or in the Storting's Question Time. The second thing to be careful about is integrity. This means that we must trust that the information is correct, and that no one has tampered with it.

02:22.176 --> 02:50.708
It can happen that someone changes the information so we can't trust anyone anymore. Imagine that you work as a teacher and that someone changes their grades. Or that you work with economics and that someone changes their salary or an account number. Or that you work as a researcher and that someone changes a data set, so that an application for 10 million in support from the EU is not granted anyway. This is always unfortunate and often illegal.

02:51.374 --> 03:16.049
And those who work with the data are also responsible for making wrong choices. Number three is availability. It means that those of us who want to get hold of the information when we need it, get hold of it. This can be vital sometimes, e.g. if you work in the healthcare system. Other times it is not so dangerous to wait a bit for the data. But this is often the IT people most responsible for.

03:17.483 --> 03:46.152
But first of all, it is important to know what you actually have in the information. And how do you know which information is important and which is not? As a private person, you can think about this, and I'm guessing you're paying extra attention to your passport. Or on the lease of your house. Or on the receipt from the emergency room that evening. And some things might put it into a safe or a safe.

03:46.169 --> 04:12.278
Some documents and images that are online should be protected more than others. Either for the sake of privacy or for the sake of other things. In the same way, businesses and companies must think about what information you have. And what data you need to process specifically. And everyone should check and assess the value of the information stored in the IT systems.

04:12.910 --> 04:37.398
You can check with your job if you already have rules. And in my sector, the UH sector, we divide our information into three classes plus a special class. It is green, yellow, red and black. And check with your job what applies to your workplace.