Viewed from a state and public security perspective, the greatest threat is the perpetrators who have the resources to carry out actions that we do not detect, which are detected too late, which can cause damage to critical infrastructure, or which may affect democratic processes. In this category we often find government parties, particularly other countries’ security and intelligence services. One challenge may be that there is uncertainty and inadequate coordination between government agencies responsible for combating serious cyber attacks. Therefore, the Government is committed to facilitating cooperation and sharing information. Key measures:  further develop the national warning system for digital infrastructure (VDI) to incre ase the ability to detect cyber attacks.  establish and further develop a national framework for cyber incident management that leads to more efficient management and improved cooperation between parties.  establish information sharing work to improve cooperation between public and private businesses during cyber incidents and establish a technical platform for sharing information.  report on and clarify how a type of digital border defence can be established and regulated by law.  increase police capability to combat crime in the digital landscape.  increase the national capability to withstand serious cyber attacks through further development of cooperation been the Intelligence Service, NSM, PST and the police in general.  improve NSM’s ability to analyse serious cyber attacks against infrastructure and information critical for society. 7.1 The warning system for digital infrastructure The ability to detect and manage cyber attacks depends on cooperation between authorities, sector CERTs and public and private businesses. NSM operates the national response function for serious cyber attacks against critical infrastructure and is responsible for organising and operating the national warning system for digital infrastructure (VDI). VDI is a network of sensors located in public and private businesses that own critical infrastructure. Information from the sensors contributes to a national capability for early detection and verification of coordinated and targeted attacks. The Government wants to upgrade the sensor technology in VDI.10 In Prop. 97 L (2015–2016) Amendments to the Security Act, the Government presented a proposal to legislate the activities currently carried out by NSM through NorCERT and VDI. When discussing Innst. 352 L (2015–2016) the Storting decided that NSM should be responsible for a national response function and a warning system for digital infrastructure. In connection with this, the Government also considered whether a legal basis should be established to be able to order certain businesses with critical infrastructure to connect to VDI. Based on the feedback from the consultation bodies, the Government concluded that such an order had to be investigated further and seen in context with an assessment of the future funding model for NorCERT and VDI. 10 Prop. 151 S (2015–2016) Long-term plan for the defence sector.