IT Incident, Problem & Continuity Management Consultant

Quick Facts

• Focus: Analysis to strengthen incident, problem, and continuity management for critical digital shared solutions

• Goal: A decision-ready set of recommendations, including a prioritized target picture and implementation plan

Description

Digdir requests an analysis to provide a strong decision basis to strengthen incident, problem, and continuity handling for its digital shared solutions in light of a changing security situation. The work will evaluate today’s organization and practices, identify significant gaps, and recommend a prioritized target state with a delivery plan. The analysis should also address dependencies on suppliers, recovery capability after severe incidents, cooperation with authorities and sectors, and whether exercises, training, and learning after incidents are sufficient.

Responsibilities (Analysis Scope)

• Assess how preparedness for Digdir’s shared solutions (including incident and problem handling) can be strengthened given the updated threat landscape

• Review whether roles, responsibilities, capacity, competencies, and work processes are adapted to the current threat picture

• Evaluate dependency management risks toward suppliers and subcontractors and their impact on shared solutions

• Assess how operational continuity and recovery capability can be ensured if one or more shared solutions are hit by severe events

• Review incident coordination with relevant authorities and sectors, and recommend how to strengthen it

• Assess adequacy of exercises, training, and post-incident learning, and how they can be further developed

• Map how current regulatory requirements (e.g., security legislation) are addressed in the governance of shared solutions

Benefits

• Provides a structured decision basis to improve preparedness, incident and problem handling, and continuity management

• Produces prioritized recommendations and an implementation plan to guide further strengthening of resilience