Key measures:  establish a national cyber security competence strategy, where the need for student capacity and research efforts are considered  through the commenced school reform in primary and secondary schools, consider wheth er cyber security has been adequately included in the basic digital expertise the pupils will acquire  strengthen cyber security competence in supervisory institutions  emphasise systematic follow-up and learning after exercises and incidents, including cyber incidents. 8.1 National strategy for cyber security competence As stated in Meld. St. 10 (2016–2017), the Government will prepare a new national cyber security strategy. One of the aims of the strategy is to facilitate long-term building up of expertise. The strategy will deal with measures to strengthen the national capacity within research and education. It will also deal with awareness measures directed at the population and businesses. Cyber security competence has previously been included in several different strategies, reports to the Storting and other documents, but this is the first time a strategy is developed that addresses the challenge of competence as a whole. In order to provide sound knowledge as a basis for the forthcoming cyber security competence strategy, the Norwegian Institute for Studies in Innovation, Research and Education (NIFU) has been assigned the task of mapping the future needs for cyber security competence in working life (see box 8.1). The report prepared will help identify the gap between available competence and the demand for this competence. Box 8.1 NIFU’s competence study NIFU has been mapping the number of students in cyber security programmes and ICT programmes with courses in cyber security in Norway in the period 2012-2016 and how many have graduated in the same period. The survey shows an increase in the number of students from 166 in 2012 to 358 in 2016 taking a study programme in cyber security and an increase from 1582 in 2012 to 2695 students in 2016 taking the study programme with courses in cyber security. NIFU’s project is still in an early phase, but a preliminary calculation shows that despite an expected steady increase in the number of people with advanced cyber security competence, the gap between supply and demand is increasing. The Ministry of Justice and Public Security will be responsible for developing the strategy in cooperation with the Ministry of Education and Research, among others. To ensure good support, the Government will assume that relevant parties are involved in the work. The work on the competence strategy will also be seen in context with the need to increase ICT competence in general and advanced ICT competence in particular.12 12 Meld. St. 27 (2015–2016) Digital agenda for Norway.