Pre-launch information security audit for Yrittäjän Polku – a high-quality end result through cooperation

Yrittäjän Polku (Entrepreneur’s Path) makes the process of starting a business both quick and secure. AI was utilised in the information security audit of the service, which provided significant efficiency benefits for the project.

Yrittäjän Polku is a newly launched service that helps entrepreneurs with starting a business and financial management. Provided by Administer, the service utilises the interface of the Finnish Patent and Registration Office (PRH), which significantly speeds up the process of starting a business. As the service processes data directly through the PRH interface, it is essential to ensure a high standard of information security. The independent information security audit required by the PRH was conducted by Netum in summer 2026.

According to Joni Koskinen, who participated in the project as an information security expert, reviewing the application’s implementation code was a key part of the audit. In addition, the experts of Yrittäjän Polku were interviewed using a workshop-based approach, the information security documentation was reviewed, and the application was evaluated from the end-user perspective.

— “We examined what the application looks like to a potential malicious actor and identified related potential security vulnerabilities. We always take an iterative approach: based on our observations, the customer was able to make the necessary changes to improve the level of information security during the project,” Koskinen says.

Eero Sallasmaa, Business Director for Yrittäjän Polku, describes the process as a team effort.

— “Netum’s recommendations were quickly adopted by our technical experts. Quality improvements were implemented through smooth cooperation, with both parties taking turns – much like a game of tennis,” Sallasmaa notes.

For Sallasmaa, the third-party audit provided, above all, assurance that everything is in order.

— “The audit did not reveal any major acute surprises, but it raised many useful observations regarding practices that we should incorporate into our operations step by step,” Sallasmaa adds.

AI makes audits more agile

Information security testing has been part of Netum’s core business for a long time, and the project carried out for Yrittäjän Polku was also a typical engagement in many respects. What made it unusual was that, due to platform restrictions, automated scanning could not be performed directly on the customer’s server. Using an AI-assisted approach, Netum developed a precisely tailored solution that enabled the audit to be implemented efficiently.

According to Solutions Architect Markus Lehtinen from Netum, AI has already become an integral part of information security audits.

— “Auditing activities based on prior knowledge and experience are still important, but the AI-assisted approach improves efficiency. We are able to generate more multidimensional observations at an even lower threshold. The customer receives clear added value with the same resources,” Lehtinen explains.

Koskinen echoes the view that AI has become part of the logic underpinning the collection of audit observations.

— “At Netum, AI-assisted methods are already built into these activities. The industry is changing rapidly, and we are also continuously developing our operations as part of it,” Koskinen says.

Thinking it through together

Sallasmaa from Yrittäjän Polku characterises the cooperation with Netum as reliable and seamless.

— “The end result was exactly what we ordered. I felt confident in Netum’s work throughout the project, and they always did what they promised,” Sallasmaa says.

Lehtinen from Netum points out that the observations themselves do not yet reveal which solutions will work best. The underlying causal relationships are often complex. The project was made easier by the customer’s flexible attitude and responsiveness.

— “Our approach is not to come down from an ivory tower and tell the customer where the problems lie. Instead, our goal is to work together to find the right solutions. In this project, communication was particularly easy and we worked through everything together in a straightforward manner,” Lehtinen concludes.