THE DATA SAFETY OF OUR CUSTOMERS IS IN OUR DNA

Safe and secure services

We want to be worthy of our customers' trust by safeguarding data security and privacy.

Why is dependable data security and private absolutely essential for DNA?

Privacy and data security go hand in hand. Only by securing our own operations can we guarantee reliable services for our customers as well. DNA wants to be a responsible and security-conscious service provider, and we are continually working to improve our data security culture.

Excellent data security is a basic prerequisite for our operations and maintaining a good data security culture is essential to us at DNA. DNA's goal in terms of data security is to protect the critical prerequisites for our success, that is, our customers, personnel, reputation, trademark and brand image and quality of services.

How our work is governed

DNA maintains a high level of security and data protection and a stringent security culture in the processing of all data related to our operations.

Our work is governed by

Laws and regulations
Privacy policy and internal guidelines
DNA’s Code of Ethics for the use of artificial intelligence
Best practices

We are also constantly training our personnel. We hold several trainings, some of which are shared by Telenor Group employees and others targeted specifically for DNA. Some trainings are mandatory for everyone, while others are additional courses for our experts in various tasks.

Our goals

Our goal is to maintain the continuous development of our level of security and increase security expertise both within DNA and among our key partners.

Examples of what we do

Kyberturvallisuuskeskuksen tiedotteita

kyberturvallisuuskeskus.fi RSS

Sonicwall SMA1000 laitteiden hallintakäyttöliittymässä kriittinen haavoittuvuus

23.01.2025 12:45

Kriittinen haavoittuvuus SonicWall SMA1000 -laitteiden Appliance Management Console (AMC) ja Central Management Console (CMC) -hallintakäyttöliittymissä mahdollistaa hyökkääjälle mielivaltaisten komentojen suorittamisen etänä ilman autentikointia. Haavoittuvuuden hyväksikäyttöä on mahdollisesti havaittu. Käyttäjiä kehotetaan päivittämään laitteiden ohjelmisto välittömästi.

Kriittinen rsync-haavoittuvuus vaatii välitöntä korjausta

16.01.2025 13:13

Rsync-palvelussa on julkaistu kriittinen haavoittuvuus. Pinonylivuotohaavoittuvuus (CVE-2024-12084) antaa hyökkääjille mahdollisuuden suorittaa mielivaltaista koodia kohdepalvelussa. Päivitä rsync välittömästi.

Fortinetin FortiOS ja FortiProxy -tuotteissa kriittinen haavoittuvuus

15.01.2025 10:30

Fortinet on julkaissut päivityksiä kriittiseen haavoittuvuuteen FortiOS ja FortiProxy -tuotteissaan. Haavoittuvuutta hyväksikäyttämällä hyökkääjän on mahdollista saavuttaa superadmin-tason oikeudet järjestelmässä. Fortinet on kertonut, että haavoittuvuutta hyväksikäytetään aktiivisesti. Fortinet on julkaissut 14.1 myös muita päivityksiä eri tuoteperheisiinsä.

Ivanti Connect Secure -haavoittuvuuden hyväksikäyttöä havaittu

08.01.2025 23:26

Ivanti julkaisi kaksi uutta haavoittuvuutta Ivanti Connect Secure, Ivanti Policy Secure ja ZTA Gateway-tuotteisiinsa. Päivitys tulee suorittaa välittömästi, sillä Ivanti Connect Secure -tuotteessa olevan haavoittuvuuden (CVE-2025-0282) hyväksikäyttöä on jo havaittu.

More releases (Opens New Window)

Our privacy work

Our policies and principles in the collection and protection of data.
Read more

Children and the Internet

Tips on safe internet use by children.

Our security services

We offer data security services to families, individuals and businesses.

Ethical code on the use of artificial intelligence:

Artificial intelligence follows the same ethical principles as the rest of our operations.

Help for victims of identity theft

If a scammer has stolen your information, the Cyber Security Centre's instructions can help you.

Cyber Civic Duty

We're a campaign partner as a Cyber Civic Duty to increase digital inclusion through knowledge of security.

How to identify scams

How to identify phishing attempts and other scams (in Finnish).

DNA helped clients tackle scam calls and phishing

Since early 2020, the number of scam calls and messages rose sharply in Finland. As a telecommunication operator we feel that we have a specific responsibility to inform our customers what to do should they receive them.

Some scam messages also appeared to have been sent by DNA, so we wanted to remind our customers of the fact that DNA never asks the customers to fill in missing personal data. The scam email sent in DNA’s name could also be identified as a scam because the sender’s email address was not DNA’s. Some messages asked the receiver to open a message they could listen to. We have also organised mandatory training for our personnel on topics such as identification of scam messages.

DNA works in active cooperation with other operators as well as the Finnish Communications Regulatory Authority to enable detection of scam calls before they reach our customers.

Mobile ID makes authentication more secure

The “Mobiilivarmenne” mobile ID is an authentication method developed by the Finnish operators DNA, Elisa and Telia. It is a domestic alternative for identification by means other than bank or social network IDs. Reliability is a key benefit of the method, because the mobile ID is not linked to the user’s bank accounts or user profiles. Mobile authentication meets the needs of our digital society and effectively protects the user’s personal data from phishing.

Authentication with the mobile ID is based on the user’s phone number and facial recognition, fingerprint or PIN code. The mobile ID can be used as an authentication method for electronic signatures, communicating with the authorities or starting a business.

The renewed authentication method was piloted in the operators’ own services during 2020 and customers can avail of it in 2021.

Read more in Finnish: https://www.dna.fi/mobiilivarmenne

DNA helped clients tackle scam calls and phishing

Since early 2020, the number of scam calls and messages rose sharply in Finland. As a telecommunication operator we feel that we have a specific responsibility to inform our customers what to do should they receive them.

Some scam messages also appeared to have been sent by DNA, so we wanted to remind our customers of the fact that DNA never asks the customers to fill in missing personal data. The scam email sent in DNA’s name could also be identified as a scam because the sender’s email address was not DNA’s. Some messages asked the receiver to open a message they could listen to. We have also organised mandatory training for our personnel on topics such as identification of scam messages.

DNA works in active cooperation with other operators as well as the Finnish Communications Regulatory Authority to enable detection of scam calls before they reach our customers.

Hide

Mobile ID makes authentication more secure

The “Mobiilivarmenne” mobile ID is an authentication method developed by the Finnish operators DNA, Elisa and Telia. It is a domestic alternative for identification by means other than bank or social network IDs. Reliability is a key benefit of the method, because the mobile ID is not linked to the user’s bank accounts or user profiles. Mobile authentication meets the needs of our digital society and effectively protects the user’s personal data from phishing.

Authentication with the mobile ID is based on the user’s phone number and facial recognition, fingerprint or PIN code. The mobile ID can be used as an authentication method for electronic signatures, communicating with the authorities or starting a business.

The renewed authentication method was piloted in the operators’ own services during 2020 and customers can avail of it in 2021.

Read more in Finnish: https://www.dna.fi/mobiilivarmenne

Hide