How an IT organisation turns its security handbook into something you can ask

The security handbook, policies, architecture principles and standards are PDFs on the intranet. They are rarely read when a member of staff has to make a choice or a developer has to set up a system.

Meanwhile the external guidance keeps changing, for example the NIS 2 guidance from SAMSIK and sikkerdigital.dk. Questions land with a few specialists, who answer the same ones again and again.

And a new kind of user has arrived: AI coding assistants that write code and configuration. They don't know the organisation's rules.

KnowledgeHub ingests the security handbook, policies, architecture principles and standards together with the NIS 2 guidance from SAMSIK and sikkerdigital.dk and the relevant legislation from Retsinformation. The external sources are maintained, so the answer follows the current guidance.

Staff ask in chat or search and get the current answer, cited to the rule it rests on. Coding assistants look up the same rules via KnowledgeHub's MCP server or API, so code and configuration can be checked against the standards as they are written. Where an internal rule and an external guideline don't match, it is flagged.

The answers are measured against a test set built with the CISO function, so the organisation can see that they are right.