Part I Introduction 1 Summary This is the first white paper on cyber security. There are several reasons why so much attention has been devoted to cyber security. Digital development is an essential part of our value creation and growth. Digitization has contributed to a safer and more secure society. It is easier for people to communicate with each other and gain fast access to information. Digitization has also altered the nature of societal vulnerability. Today, no sectors and few nations can control their digital vulnerability on their own. The Digital Vulnerability Committee (the Lysne Committee)1 points out that Norway is at the forefront of digitization, which means that we as a society face vulnerability challenges early on. Threat assessments show that foreign states are willing to use various means of gaining access to sensitive and confidential information and influencing political, economic and administrative decisions. There are major financial losses due to cybercrime. In addition, computer systems have been known to fail due to human error, software and equipment failures, natural events or a combination of these. To ensure improved efficiency through increased digitalisation of the Norwegian society, computer systems and digital services must be adequately secure and reliable. Businesses and individuals must be confident that systems and networks function as intended and protect the privacy of the individual. Good cyber security and the capability to detect and manage unwanted cyber threats are a prerequisite for gaining this trust. Cyberspace is developing rapidly and the challenges are transboundary - across countries, sectors and businesses. Hybrid threats erase the traditional divide between peace and war and challenge the traditional division of responsibilities between the civil and military sector. Therefore, the Government wants to strengthen cooperation between private and public businesses, between the civil and military sectors and across national borders. At national level, the Ministry of Justice and Public Security, the Ministry of Defence and the Ministry of Foreign Affairs will strengthen their cooperation in this area. The Lysne Committee presents a number of recommendations to reduce digital vulnerabilities in the society. This white paper provides an overview of the status of the follow-up of the committee’s recommendations. The status overview shows that there is a need to work in parallel with a wide range of areas within cyber security. Our society will never be able to be fully protected against failure of or attacks against the digital infrastructure and systems, but we must be able to implement the correct security measures to reduce the risk and to be able to restore normal function as soon as possible. The Ministry of Justice and Public Security will use the overview to follow-up the ministries in the future work on national cyber security. 1 NOU 2015: 13 Digital vulnerability – secure society.