Hjem » Sykehuspartner – Healthcare

Governance and security for healthcare data at +3 million people scale

Client

Sykehuspartner – Healthcare

Industry

Health IT / data infrastructure

Challenge

Creating governance, security and a robust operating model for a large health data platform

Results

A secure and governed Power BI platform gave 90,000 health professionals reliable access to data

Scope

Governance and security for a critical health data platform

Sykehuspartner AS supports most of the regional health authorities in Norway. Around 90,000 users work with the platform, and the decisions made based on its data affect the treatment of around 3 million people.

As the Power BI environment grew across both cloud and on-premises infrastructure, governance became an increasingly important part of the solution.

Sensitive health data, strict legal requirements and a decentralized organization placed high demands on clear rules, access management and an operating model that could work in practice.

The project included:

  • establishing a governance model for a large and decentralized data platform
  • clear guidelines for data sharing, ownership and lifecycle
  • security architecture for sensitive health data across cloud and on-premises infrastructure
  • structuring roles, permissions and access control
  • an operational foundation focused on high uptime, compliance and long-term maintenance
  • secure integration between on-premises systems and cloud-based analytics

The solution

A platform built for trust, compliance and scale

The goal was to turn a growing Power BI environment into a governed, operations-ready platform that could scale securely in a highly regulated healthcare sector.

BCT worked across both Power BI Cloud and Power BI On-Premises and built the framework needed to ensure stable access to data, clear responsibility and operations the organization could rely on.

Governance wasn't treated as documentation alongside the platform.

It was built into the solution itself through policies, access structures, technical architecture and operational processes that could work in everyday use.

Process

BCT provided strategic and technical support on-site for more than two years and helped Sykehuspartner create the structure needed to run the platform securely and efficiently.

Governance model

We established a unified governance model covering data ownership, sharing, lifecycle and user responsibility, among other things.

The model was designed for a decentralized organization with strict regulatory requirements and several control points to reduce the risk of data leaks and errors in critical reporting.

At the same time, we built a hybrid governance model that made it possible to keep local agility without losing central control.

This gave a more efficient setup for managing more than 5,000 reports and 250 workspaces.

Security architecture

We defined and implemented roles, permission models and security standards in line with GDPR, Norwegian healthcare requirements and the handling of sensitive health and identity data.

The security model was built around advanced group management in Azure Entra ID with several layers and approval flows.

The solution was also connected to a larger ITSM structure with reporting for day-to-day administration and follow-up.

The result was a setup that could be run by a smaller specialized team with far more efficient tools. Tasks that previously could take months could be automated and completed in about two days.

Hybrid architecture

We designed a secure gateway between on-premises data sources and the cloud environment, so data could move reliably between the systems without exposing sensitive information.

The solution was built on a detailed network structure with separate VLANs and clear security zones.

The gateway was centrally managed by the BI team and built around clear governance and security processes with a controlled one-way data flow.

Platform operations

We helped establish and run the platform throughout the engagement, focusing on uptime, compliance and stable operations for a large and critical user group.

For more than two years, BCT supported Sykehuspartner with setup, integration, implementation and day-to-day operations after go-live.

Results

The result was a secure, governed and operations-ready Power BI platform built for large scale.

With the right governance model, security architecture and hybrid operating structure, Sykehuspartner got a stronger foundation for access to health data across the organization.

This made it possible to:

  • support 90,000 health professionals through a governed analytics platform
  • meet strict requirements for data security and access control
  • create a secure and stable data flow between on-premises systems and the cloud
  • make responsibilities and roles clear for teams, users and data owners
  • strengthen long-term operations with a structure that can scale

More broadly, the work meant that health professionals and administrative staff could make faster and better-informed decisions on a more secure and stable data foundation.

Running a data platform where there's no room for error?

Governance, security and operations rarely get simpler as a platform grows.

If your data platform is growing faster than the framework meant to keep it under control, let's talk.

Talk to us about your project

More cases

See all cases
The most human AI company in the world.
Born digital. Built different.
Contact
info@blackcapitaltechnology.com
Mølleå 3-5,
9000 Aalborg
Denmark
(+45) 39 39 42 43
CVR:
DK-42380784
Tordenskiolds gate 2,
0160 Oslo
Norway
(+47) 907 00 863
Org. nr.:
NO-933435458