PRIORITISED AREAS 3 3.2 Cyber security in critical societal functions Strategic goal: Critical societal functions are supported by a robust and reliable digital infrastructure. Society is dependent on critical societal functions being maintained, and this requires the digital infrastructures that support them to work everywhere and at all times.2 Mutual dependencies across digital infrastructures represent a particular challenge. This applies in particular to the power grid and electronic communications networks, which constitute fundamental infrastructure for almost all digital infrastructures. An incident occurring in one digital infrastructure may generate negative impact on another. Companies should therefore be aware of which services they themselves are dependent on, and what potential consequences incidents in their own digital infrastructure may have on others. Subsidiary goals: 1. The authorities ensure that frameworks and methods for identifying critical digital infrastructure are in place and provide guidance to make sure that critical digital infrastructures are identified. 2. Public and private companies that own critical digital infrastructure perform risk assessments to identify vulnerabilities and mutual dependencies between infrastructures so as to ensure comprehensive securing of digital value chains. 3. The authorities maintain an overview of critical national digital infrastructure. 4. The authorities define security requirements for critical digital infrastructure, provide guidance and conduct audits to ensure security requirements are met. Public and private companies that own critical digital infrastructure implement measures that ensure appropriate security in these. 5. Public and private companies participate in contingency exercises related to critical digital infrastructure. 2 This strategy also includes critical social functions beyond what is covered by the Security Act. This can be functions that fulfil the fundamental needs of society and the population’s sense of security (banking and financial services, health services and the like). See DSB’s report “Society’s critical functions” for an overview of these. National Cyber Security Strategy for Norway | 15