Lars Erik Smevold, the Industrial Cibersecurity Center Coordinator in Norway (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been an exponentially grown in awareness.

Norway counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

• Norwegian Water and Energy Directorate
• Petroleum Safety Authority Norway
• Norwegian National Security Authority
• Norwegian Energy Sector and Control System CERT (KraftCERT)
• Norwegian Communication Authority

Among the main national laws and regulations affecting in this context in Norway, Lars Erik Smevold mentions:

• National Security Act
• Energy Act - Electricity/Oil&Gas
• Electronic Communications Act
• Norwegian Data Protection Authority - GDPR

Analysing the most widely adopted industrial cybersecurity measures by Norway organizations to protect industrial automation systems, Lars Erik Smevold highlights the application of:

• Implementation of safety management systems
• Network design and architectures
• Conventional firewalls
• Industrial firewalls
• Backups
• Whitelisting

The CCI Coordinator in Norway characterizes the industrial cybersecurity situation in his country with the following SWOT analysis: