Abstract or Summary:

Sykehuspartner, the ICT provider for Norway’s largest regional health care trust, recently chose to implement a voluntary “password never expires” policy, as proposed by NIST SP 800-63B. Why? And what happened?

In this presentation, Camilla Lyngedal and Almedin Santic will explain the business needs behind the change in policy, and which benefits Sykehuspartner hopes to achieve by implementing “password never expires” – and will share the preliminary results so far.

The presentation will focus on process, involvement and risk – and the inherent privacy issues related to performing password strength verification.

Camilla Lyngedal is a security advisor in Sykehuspartner, working with policy, process and risk. She believes that awareness is key to better information security, and works every day to impact her colleagues.

Almedin Santic is part of the Sykehuspartner in-house information security auditing team. He has more than 6 years of experience within audits and advisory in governmental organizations.

PasswordResearch.com Note: Video of presentation: https://www.youtube.com/watch?v=ZZtIkLKVFg8