A key knowledge base is Norwegian Official Report (NOU) 2015: 13 Digital vulnerability - secure society (the Lysne Committee). The Committee assessed digital vulnerabilities at several levels - both at overall social level and in technical infrastructures and systems. The Lysne Committee presented a number of recommendations to reduce digital vulnerabilities in the society and in critical societal functions. The report was presented to the Minister of Justice and Public Security on 30 November 2015. Part III of this white paper provides an overview of the status of the authorities’ assessment and follow-up of the Lysne Committee’s recommendations and an overview of the priorities in the future follow-up work. The Ministry of Justice and Public Security will use the status overview to follow-up the ministries in the civil sector in the future work on national cyber security. The status overview in Part III shows that there is a need for a broad approach to the work on cyber security in the future. Several sectors face similar types of challenges, such as developing expertise on cyber security or dealing with a serious cyber incident. Based on the assessments in Part III, together with the existing knowledge base, development features and challenges in the area, the Government will emphasise selected cross-sectoral areas. The Government believes that these areas are of particular importance for national cyber security.     Preventive cyber security - businesses’ own abilities Detecting and managing cyber attacks Cyber security competence Critical ICT infrastructure The Government's emphasised areas and measures to improve cyber security are described in Part II. To succeed in these areas, the Government is committed to strengthening public-private, international and civil-military cooperation, which is discussed in more detail in Chapter 5. In addition to the measures presented in this report, the Government is following-up NOU 2016: 19 Cooperation for security. Compared with the applicable Security Act, the proposals in this white paper will be able to enhance national cyber security in many ways. Several businesses outside the public sector are subject to the law. Businesses covered by the Act are obliged to provide an adequate level of security for all information systems critical to fundamental national functions. For further information, see section 6.1. 3 Trends and the importance of cyber security There are high expectations that digital services are provided and available at all times, while also being robust and able to withstand threats and risks. Failure or a security breach may occur in a combination of different circumstances. These may be intentional acts and attempts at improper use, as well as human error, equipment failures or unclear responsibility. Competence is a key factor in handling demanding and complex incidents. The demand for cyber security competence has increased. Many challenges related to cyber security develop faster than public and private businesses are able to respond. In the years to come, we will face ever-increasing and more complex security challenges. ICT infrastructure and systems are becoming more global, comprehensive and integrated. An increasing number of devices are connected to the internet. There is more widespread use of