APPENDIX A SELECTED NATIONAL CONTACTS Appendix A: Selected national contacts Cyber security is primarily a responsibility at company level. Corporate managers are responsible for conducting risk assessments and then, on the basis of these, implementing appropriate measures. In addition, all government ministries are responsible for enforcing cyber security in their own sector. The list below presents some ministries and selected national contacts with crosssectoral cyber security responsibility. MINISTRY OF JUSTICE AND PUBLIC SECURITY (JD) MINISTRY OF DEFENCE (FD) MINISTRY OF LOCAL GOVERNMENT AND MODERNISATION (KMD) MINISTRY OF FOREIGN AFFAIRS (UD) Coordination responsibility for cyber security in the civilian sector, as well as a general coordination responsibility for the civilian security of society. Responsibility for the Security Act. Responsibility for cyber security in the defence sector. Special responsibility for working to promote a stronger, more comprehensive approach to cyber security in public administration. KMD also holds coordination responsibility for the government’s ICT policy, and responsibility for cyber security in electronic communication networks and services, including the internet. Responsibility for Norwegian foreign and security policy, including coordinating Norway’s input and positions in international arenas where global challenges in cyberspace are discussed. The Norwegian National Security Authority (NSM) is the national specialist organisation for cyber security and the national warning and coordination body for serious computer attacks on infrastructure critical to society and other key societal functions. NSM runs the national response function for serious computer attacks on critical infrastructure (NorCERT) and the national warning system for digital infrastructure (VDI). It has recently been decided to establish a national cyber security centre linked to the NSM. landscape. The work to establish the unit was commenced in 2018 and is scheduled to be completed before the end of 2021. The principal tasks of NC3 will be to prevent and combat crime through investigation, securing evidence, developing methodology and providing support to other sections of the police force. www.nsm.stat.no The Norwegian Police Security Service (PST) has responsibility for the domestic security of the nation. PST prevents and investigates crimes that threaten national security, including collecting information concerning individuals and groups who may pose a threat, developing various analyses and threat assessments, conducting investigations, applying other operational countermeasures and providing advice. The National Police Directorate (POD) is responsible for management, governance, follow-up and development of the police districts and special police units. It has recently been decided to establish a national cyber crime centre (NC3) under the National Criminal Investigation Service (Kripos) to develop the skills and capacity of the police to tackle a more digitalised crime and evolving threat 22 | National Cyber Security Strategy for Norway www.politiet.no www.pst.politiet.no