1
SUMMARY ........................................................................................................................................................ 7
2
BACKGROUND, FRAMEWORKS AND THE CONTENTS OF THE REPORT ............................................................... 8
3
TRENDS AND THE IMPORTANCE OF CYBER SECURITY ....................................................................................... 9
4
CYBER SECURITY AND PRIVACY ....................................................................................................................... 10
5
A JOINT RESPONSIBILITY ................................................................................................................................. 13
5.1
5.2
5.3
6
PREVENTIVE CYBER SECURITY – BUSINESSES’ OWN ABILITIES ......................................................................... 16
6.1
6.2
6.3
6.4
6.5
6.6
6.7
6.8
7
NATIONAL STRATEGY FOR CYBER SECURITY COMPETENCE ............................................................................................... 31
PRIMARY, LOWER AND UPPER SECONDARY SCHOOL EDUCATION ...................................................................................... 32
HIGHER EDUCATION ............................................................................................................................................... 32
RESEARCH ............................................................................................................................................................ 33
POST-QUALIFYING AND FURTHER EDUCATION .............................................................................................................. 34
COMPETENCE IN SUPERVISORY INSTITUTIONS ............................................................................................................... 34
EXERCISES ............................................................................................................................................................ 35
CRITICAL ICT INFRASTRUCTURE ....................................................................................................................... 36
9.1
9.2
9.3
9.4
9.5
10
THE WARNING SYSTEM FOR DIGITAL INFRASTRUCTURE ................................................................................................... 24
FRAMEWORK FOR CYBER INCIDENT MANAGEMENT........................................................................................................ 25
INFORMATION SHARING .......................................................................................................................................... 26
DIGITAL BORDER DEFENCE ....................................................................................................................................... 27
CYBERCRIME ......................................................................................................................................................... 28
COORDINATION BETWEEN NSM, THE INTELLIGENCE SERVICE, PST AND THE POLICE ............................................................ 29
OPENNESS ABOUT CYBER ATTACKS............................................................................................................................. 30
ANALYSIS CAPACITY ................................................................................................................................................ 30
CYBER SECURITY COMPETENCE ....................................................................................................................... 30
8.1
8.2
8.3
8.4
8.5
8.6
8.7
9
LEGAL REGULATION IN THE AREA OF CYBER SECURITY ..................................................................................................... 17
ORGANISATION OF CROSS-SECTORAL RESPONSIBILITY .................................................................................................... 18
SYSTEMATIZATION AND DEVELOPMENT OF RECOMMENDATIONS AND REQUIREMENTS ......................................................... 18
OUTSOURCING ...................................................................................................................................................... 20
INTRUSION TESTS ................................................................................................................................................... 21
KNOWLEDGE BASE ................................................................................................................................................. 22
CULTURE AND LEADERSHIP ....................................................................................................................................... 22
PRIVACY AND PREVENTIVE CYBER SECURITY ................................................................................................................. 23
DETECTING AND MANAGING CYBER ATTACKS ................................................................................................ 23
7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
8
PUBLIC-PRIVATE COOPERATION................................................................................................................................. 14
INTERNATIONAL COOPERATION ................................................................................................................................. 14
CIVIL-MILITARY COOPERATION .................................................................................................................................. 16
ALTERNATIVE CORE INFRASTRUCTURE AND ROBUSTNESS IN THE REGIONAL TRANSPORT NETWORKS......................................... 37
INTERNATIONAL CONNECTIONS ................................................................................................................................. 38
EMERGENCY AND PREPAREDNESS COMMUNICATION ..................................................................................................... 38
CYBER SECURITY IN MANAGEMENT AND CONTROL SYSTEMS ............................................................................................ 39
PRIVACY AND CRITICAL ICT INFRASTRUCTURE – COMMUNICATIONS PROTECTION ............................................................. 40
ELECTRONIC COMMUNICATION ...................................................................................................................... 42
10.1
REDUCE THE CRITICALITY OF TELENOR’S CORE INFRASTRUCTURE ................................................................................. 42