• A Checklist for Supply Chain Security for Critical Infrastructure Operators 

      Jaatun, Martin Gilje; Sæle, Hanne (Chapter, 2024)
      Critical infrastructure applications do not emerge fully formed, but generally rely on components and services from third-party vendors. This paper presents a brief survey on good practice for security requirements to be ...
    • Exploring the need for a CERT for the Norwegian Construction Sector 

      Skytterholm, Andrea Neverdal; Jaatun, Martin Gilje (Chapter, 2023)
      This paper presents an empirical study on the need for sector-specific CERT capacity in the Norwegian construction sector. Findings from the interviews demonstrate a need for developing competence in ICT security in this ...
    • A method for threat modelling of industrial control systems 

      Flå, Lars; Jaatun, Martin Gilje (Chapter, 2024)
      In this paper, we propose a new method for threat modelling of industrial control systems (ICS). The method is designed to be flexible and easy to use. Model elements inspired by IEC 62443 and Data Flow Diagrams (DFD) are ...