¶ My Account
My Account is where you manage your own profile, password, two-factor authentication and which notifications you receive. Every user can change their own account; you do not need to be an administrator.
¶ Opening My Account
- Click the user icon next to your name in the top right corner of Diri.
- Select My Account.
¶ Profile
At the top of My Account you can edit your profile, such as first name, last name, username and phone number. Click a field to change it.
To change the language Diri is shown in (English or Norwegian), use the language selector in the top bar.
¶ Security settings
¶ Changing your password
- Under Security settings, click Change password.
- Enter your Current password.
- Enter a New password and type it again in Confirm new password.
- Click Save password.
The password must contain at least 12 characters, one number, one uppercase letter and one lowercase letter.
If your organisation has turned off password login and you sign in with Microsoft, My Account shows “Password login is disabled for this organization”. Your password is then managed by your organisation's Microsoft account.
¶ Two-factor authentication
If you sign in with email and password, you can protect your account with a code from an authenticator app on your phone. Setup, recovery codes and what to do if you lose your phone are described in Two-factor authentication.
¶ Notifications
Diri notifies you about things that concern you, such as tasks and treatments assigned to you, approaching deadlines, review dates, risk ownership and framework controls you own. For each type of notification you choose how you want to receive it:
- Via email – Diri sends you an email. Emails are sent from noreply@diri.no.
- In app – the notification appears under the bell icon in the top bar.
The notification options include, among others:
- Tasks – a task is assigned to you, or tasks assigned to you are nearing expiration or have expired
- Treatments – a treatment is assigned to you, its status changes, or it is nearing expiration or has expired
- Risk assessments – a risk assessment is completed, or its review date is approaching
- Risk ownership – you are assigned as risk owner, a risk you own is accepted by someone else, or your risk acceptance or signature is superseded
- Policies – a policy is assigned to you, or its revision date is approaching
- Privacy and incidents – you are added as owner of a data processing record, or as reporter or participant in an incident
- Frameworks – you are assigned as control owner or default framework control owner, a control you own is due for review, or a requirement changed after your review
- Comments – someone comments on your task, treatment or control
- Sharing and transfers – an item is shared with you, unarchived, or transferred to another user or organisation
Hover over the information icon next to an option to see exactly when it is sent. Changes are saved for your user only.
New users start with the notification defaults chosen by the administrator of their organisation (Settings → General → Notification defaults). You can change your own choices at any time.