support systems and pure communication systems to control and management systems. The proposed bill obliges businesses covered by the law to implement security logging and authorises implementation of intrusion testing. Overall, the Act will help to improve national cyber security and thus reduce our total digital vulnerabilities. Furthermore, the systematics will improve the security authority’s possibility to have a comprehensive and national overview of vulnerabilities, including the digital and other challenges. This will in turn form the basis for working purposefully to reduce our vulnerabilities. There is a need to assess whether the current legal regulation of national cyber security is appropriately arranged. The Government will set up a committee to identify relevant sector-specific and cross-sectoral regulations within cyber security. It will be assessed whether existing regulations are consistent, and address the new digital societal challenges. It will be assessed whether there is a need for harmonisation of the existing legislation. Furthermore, the committee will investigate the need for and possibly propose a national cyber security Act. The report will be limited to provisions, organisation and authority that follow from the Security Act and proposed new Security Act. 6.2 Organisation of cross-sectoral responsibility In connection with the report on legal regulation of the area of cyber security (see section 6.1), the Government will also investigate organisational circumstances, which as cross-sectoral coordination, advice, supervision, notification of incidents and the preparation of security requirements. Digitalisation has a greater degree of dependence and connection between public and private, civilian and military and between different sectors of society. The threat and vulnerability situation changes quickly at the same time as the society becomes increasingly more complex. This creates several challenges for the authorities, including in terms of expertise and resources. Utilisation of community resources must be optimised to achieve good cyber security. The committee will assess whether responsibility, roles and tasks are appropriately distributed and organised between agencies with cross-sectoral responsibility in the area of cyber security. The committee will also examine the possibilities for coordination, cooperation and synergies between the public and private sector so that national cyber security is maintained and strengthened. 6.3 Systematization and development of recommendations and requirements The authorities come with a number of recommendations and requirements in the area of cyber security. There is significant systematic and good work in progress on implementing these (see box 6.2 on follow-up of national requirements and recommendations in cyber security at the Ministry of Climate and Environment). However, it may be demanding for businesses to relate to the scope of recommendations and requirements. Therefore, through the forthcoming action plan for national cyber security strategy, the Government will facilitate so that businesses can more easily assess and prioritise cyber security measures based on the size and maturity level of the business.9 9 For further discussion of the new national cyber security strategy, see Meld. St. 10 (2016 –2017) Risk in a safe and secure society.