Box 6.2 An example of follow-up of national requirements and recommendtions within cyber security The Ministry of Climate and Environment has drawn up a long-term plan to reduce ICT vulnerability in the sector. In the ministry’s ICT strategy for 2016-2020, emphasis was placed on increasing cyber security in the sector. Specific measures have been put in place to meet the objectives of the strategy. These measures include establishing a common environment for ICT operations. National Security Authority (NSM) has called for fewer ICT environments in the public sector, i.a. in the National Security Advice 2015. The Ministry of Local Government and Modernisation, in cooperation with the Ministry of Justice and Public Security, assess how the cyber security work in the public sector should be further developed. Key recommendations from Action plan for information security in the public sector (2015–2017) will be incorporated into the forthcoming action plan for the national cyber security strategy. In 2017, NSM has begun the work on establishing a guideline for cyber security, based on recognised standards and defined basic principles. The framework will be further developed to reflect changes in technology and risks. The purpose is to establish a set of key measures for securing ICT solutions of social importance. This work will be an important basis for the Government’s forthcoming action plan, and together with the framework for cyber incident management (see section 7.2) will provide uniformity in the work on cyber security in Norway. Figure 6.1 Measures against cyber attacks. Illustration: M. Sylstad, NSM.