Information security

Be vigilant

• Don’t automatically trust the sender – even messages that appear genuine can be spoofed.
• Don’t click on links in unexpected messages – instead, go directly to our website.
• Scammers often create a sense of urgency or fear – for example, by claiming your account is blocked or immediate action is needed.
• We will never ask you to provide your password or BankID via phone, email, or SMS.

Password protection

Your password is personal – never share it with anyone. Protect yourself by:

• Using long, unique passwords – consider using a phrase that cannot be linked to you.
• Enabling multi-factor authentication (also called two-step verification) where possible. This could be biometrics (FaceID or fingerprint) or a one-time code via BankID or an authentication app (such as Microsoft Authenticator or Google Authenticator).
• Changing default passwords on new devices and services.
• Using a password manager to keep track of your passwords.

Keep your systems up to date

• Regularly update your apps and operating system.
• Enable automatic updates where possible.
• Use built-in security features like firewalls and antivirus protection.

Back up regularly

• Set up routines for backing up important files, documents, and photos.
• Store backups separately from your computer (for example in the cloud or on an external drive).

Protect your personal information – prevent identity theft

• Lock your physical mailbox and shred documents containing sensitive information.
• Use secure digital services like Digipost and e-Boks and opt for direct debits and e-invoices.
• Never share your BankID with anyone – not even family members.

How Storebrand works with information security

Storebrand maintains a high level of awareness around information security and digital resilience. To protect customer data and ensure stable operations of our digital services, we follow strict guidelines for managing ICT risks.

We have established a dedicated policy for digital operational resilience. This policy outlines how we prevent, detect, handle, and recover from ICT-related incidents – in accordance with applicable regulations, including the DORA Regulation.