þjónustaöryggi

þjónustaöryggi, or service security, refers to the protection of IT services against threats that could compromise their confidentiality, integrity, availability, or authenticity. It encompasses all measures taken to safeguard the delivery of services to end users, including servers, applications, cloud offerings, and on‑premises infrastructures. The discipline is mutually related to cybersecurity and information security, but focuses specifically on the components that provide a service rather than on data or devices alone.

Key objectives of þjónustaöryggi include ensuring that authorised users can reliably access services, preventing unauthorised access or manipulation of service processes, and reducing the risk of service disruptions caused by attacks or failures. To achieve these objectives organisations adopt a combination of technical controls, such as firewalls, intrusion detection and prevention systems, encryption, and secure authentication mechanisms, as well as organisational controls such as policies, procedures, and staff training. Continuous monitoring and incident response are essential parts of a service security strategy, allowing rapid detection and mitigation of incidents before they escalade.

Common practices in þjónustaöryggi are penetration testing of service endpoints, regular vulnerability assessments of service software, application of secure coding standards, and implementation of service‑level agreements that define security requirements. Cloud‑based environments introduce additional considerations, such as multi‑tenancy isolation, shared responsibility models, and compliance with regional regulations like GDPR or NIS2.

Effective þjónustaöryggi requires a holistic approach that aligns technology, process, and people. By integrating security into the design and operation of services, organisations can minimise risks, meet regulatory demands, and build trust with users and stakeholders.