Alert report · Nordvik AS
Alert #7: Betalfil
- Aware
- 03:12: monitoring, not a customer
- Answered
- 03:16: Jonas Berg, 4 minutes after opening
- Service impact
- None outside. Fixed before the 06:00 bank run.
1 · How we found out
The check “Hourly payment file” wants a ping every hour at :00, 10 minutes of grace. Last one in at 02:00:04. The 03:00 ping never came. Alert opened itself at 03:12. Nobody reported it.
2 · Who we called
| Time | Person | Channel | Outcome |
|---|---|---|---|
| 03:12:09 | Kari Moen | SMS | Failed: carrier rejected the number. |
| 03:12:11 | Kari Moen | Phone | Delivered. No answer. |
| 03:14:11 | Jonas Berg | SMS | Delivered. Answered 03:16. Pressed “I have it”. |
| — | Eva Strand | None | Not reached. The call order stopped when Jonas Berg answered. |
3 · Why it happened
“Bank rotated the SFTP host key at 02:47. No warning. Our job refused it, which is correct, it had never seen that key. Pinned the new fingerprint 05:52. File through 05:58. Have asked them to tell us next time.”
4 · NIS2 filings
| Obligation | Due | Done | State |
|---|---|---|---|
| Early warning (24 h) | 15 Sep 03:12 | 14 Sep 09:02 | Met: drafted Jonas Berg, approved Eva Strand, sent 09:02:14 by email to beredskap@nsm.no, CTO on copy |
| Incident notification (72 h) | 17 Sep 03:12 | 14 Sep 09:31 | Met: drafted Jonas Berg, approved Eva Strand, sent 09:31:02 by email to beredskap@nsm.no, CTO on copy |
| Intermediate report (on request) | On request | None | Not owed |
| Final report (1 month after the first notice was sent) | 14 Oct | None | Not yet due |
5 · Evidence
- ping log
- 02:00:04 → 05:58:12
- delivery receipts
- 2 of 3 · provider ids on file
- this document
- https://www.amondinops.com/en/document/demo · this address always serves this same document
This is what your own alert looks like when it is over. 499 kr a month, 200 messages included.