   clarify and strengthen the frameworks for cooperation between businesses, sector CERTs, NSM, the Intelligence Service, PST and the police in general. further develop the ability to share relevant information and report cyber attacks clarify points of contact with other countries and organisations To ensure that all relevant parties receive the correct warning information and are enabled to take the necessary action, the government has decided to establish sectoral CERTs. The CERTs will have an overview of their own sector, be the information hub for all relevant businesses and be the sector's link with NSM. Sectoral CERTs are a key prerequisite in the framework for national incident management. Sectoral CERTs are discussed several places in part III. A draft framework was used during the national "IKT16" exercise in November 2016. Experience from the exercise is now being used in the work of completing the framework (see the overview of preliminary findings in box 7.2). In the event of failure of critical social functions due to a cyber attack, there will be a need for crisis management at community level by a number of players, such as emergency preparedness agencies, local authorities or voluntary organisations, similar to other incidents affecting critical societal functions. Box 7.2 Preliminary findings from the "IKT16" exercise The purpose of the "IKT16" exercise was to put Norway in a better position to manage a major cross-sectoral cyber attack. Learning was prioritised in the planning, implementation and follow-up of the exercise. DSB led the work on the exercise. Some of the preliminary findings from the exercise:      The National Framework for Digital Event Management provides a good basis for dealing with a coordinated response to a cyber attack. There is a clarification need for what to expect between businesses related to information sharing and situation report. NSM’s unclassified national situation report was an important source of information. There is different organisation and maturity level in the sector CERTs. It is important to include different environments in a coordinated national response in the further development of the framework. There is a need for clarification of roles and responsibilities between the businesses’ ICT environments and emergency preparedness environments. Both types of environment must be involved in the crisis management and it is crucial that they cooperate well. The final evaluation report will be available in 2017. 7.3 Information sharing Information sharing is essential for detecting and dealing with cyber attacks. This has potential for improvement and was a key topic in the Lysne Committee's report. The Committee meant there was untapped potential for information sharing. Therefore, NSM has initiated work to improve the cooperation and flow of information related to cyber incident management in Norway. The purpose of the work is to ensure that assessment of cyber attacks can be made across sectors, and to ensure