Status of measures
The provider situation in the electronic communication sector changes over time. The main producers of advanced telecommunications equipment has previously been the US and Europe, but in recent years we have seen that more and more of the most advanced equipment is produced and supplied by Asian companies. The electronic communication providers choose themselves which suppliers they will use, and they are responsible for the security of their network and for their customers. This applies regardless of whether the suppliers come from a country with which Norway has
security policy cooperation, or not.
For the electronic communication providers it may have advantages and disadvantages to associate
with one single supplier of equipment and services. The electronic communication providers may
achieve lower operating costs and fast technological development, but may also be dependent on
the supplier for price and technological development. Not least, they may be vulnerable to faults
linked to one supplier. The providers should therefore see the benefit of using several suppliers in
their networks. The electronic communication authorities (the Ministry of Transport and Communication and Nkom) follow the development in the supplier situation and give advice and guidance
in the Electronic Communication Security Forum.18 Vulnerabilities that cannot be dealt with in the
Electronic Communication Security Forum may be discussed with Nkom and the Ministry of
Transport and Communication.
According to the Ministry of Transport and Communication’s assessment, the competition legislation is not suitable for solving the challenges the Committee highlighted. The objective of the competition legislation is to ensure competition in the market and efficient use of resources. To avoid
being restricted, electronic communication providers usually have more than one supplier of critical components.
In NOU 2016: 19 Cooperation for security, the problem is dealt with in connection with a broader discussion of supplier security,see the explanation in Chapters 11 and 12 on classified acquisitions and
ownership control. The Committee recognises the problem and sees it in context with challenges
related to foreign ownership with strategically important companies, including supply security.
Reference is made in the report to Meld. St. 9 (2015–2016) National Defence Industry Strategy. Provisions already apply today to businesses subject to the Security Act, which allow control of suppliers who receive access to sensitive information or object, cf. chapter 7 of the Security Act. In addition, the Committee proposes new provisions that allow the authorities to control ownership of strategically important companies, cf. Chapter 10 of the bill.
10.3 Create a CSIRT in the electronic communication sector directed
by Nkom
Problem description (NOU 2015: 13, section 11.7.3)
Most providers of electronic communication services in Norway are very small, and few of these
own their own network. There is a need for good overall management of incidents in the digital
18
A forum where private electronic communication providers and the security authorities share relevant information.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents