VAHTI 3/2017 information security instructions for e-services

VAHTI 3/2017 information security instructions for e-services

Summary of key points:

• Information security is one key success factor in e-services. Risks related to security must be removed or moderated, but at the same time the effectiveness and usability of the service shall not be endangered with too stiff controls.
• It should be clarified which parts of the instructions are for guidance and which are mandatory. In addition, the relation to other existing security guidelines should be clarified.
• More focus should be placed on consistent terminology.