5.3 Civil-military cooperation A changed security policy situation, combined with hybrid6 threats, makes civil-military cooperation in cyberspace more relevant than ever before. The military and civilian sector use to an increasing extent a common ICT infrastructure and services are purchased by commercial stakeholders. This means that they also have common digital vulnerabilities. Good cooperation between civilian and military authorities is crucial. The modernised Norwegian total defence concept includes mutual support and cooperation between the Armed Forces and the civilian society. The fundamental idea of total defence is that the whole of society’s resources should, if necessary, be capable of being used in defence of the country, to deal with immediate or imminent threats to public safety in peacetime, security crises and war situations. It is no longer a prerequisite that the emergency legislation enters into force for it to be said that the support can be said to be within the scope of the Norwegian total defence concept.7 In November 2016, the Government decided that the Ministry of Justice and Public Security will establish a programme for further development of the Norwegian total defence concept and increase the resilience of essential functions. The reason for implementing this work is NATO’s expectations for member states to strengthen the robustness of essential functions, adopted by NATO in February 2016.8 NATO places greater emphasis than previously on civil preparedness and civil-military cooperation. The reason is that civil preparedness, crisis management and robust critical social functions are a prerequisite for each country’s and thus the alliance’s, overall preparedness and defence. A robust and accessible ICT infrastructure is necessary to maintain all critical social functions and is an input factor in NATO’s fundamental expectations for the member states. In 2016, Norway signed a revised cooperation agreement with NATO on protection against cyber threats. The agreement ensures information sharing between the stakeholders which improves Norway and NATO’s capability to protect ICT systems against cyber attacks. NATO’s Heads of State and prime ministers signed a joint cyber declaration under the NATO summit in the summer of 2016. It is important for NATO and the member states to work for increased cyber security across sectors in society and between countries. Norway must follow-up the obligations contained in the cyber declaration. 6 Preventive cyber security – businesses’ own abilities The Government is committed to facilitating that businesses can improve their own ability to prevent cyber incidents. The answer to the challenges does not only involve greater resources or 6 Hybrid threats and instruments are understood to be actors’ use of economic, political and military means to exploit vulnerab ilities to achieve something, such as to create unrest in a society. The actors may be state-sponsered or non-state-sponsored. In 2017, DSB will develop a scenario based on hybrid threats in its annual report “Crisis Scenarios”. 7 8 Support and cooperation - A description of the total defence today (the Government 2015). For more information, go to http://www.nato.int/cps/en/ natohq/topics_49158.htm?selectedLocale=en.