OECD Reviews of Risk Management Policies: Norway 2006 [electronic resource]: Information Security /
Organisation for Economic Co-operation and Development.
Organisation for Economic Co-operation and Development.
OECD Futures Project on Risk Management Policies.
Paris : OECD Publishing,
2006.
The development of information and communication technologies and networks, and in particular that of the Internet, has gone hand in hand with the emergence of new types of malevolent actions called cyber-crime: viruses, worms, Trojan horses, and the like. While a number of factors make a strong case for governmental action in the area of information security, there are also important limits to what governments can achieve. This review, the first in a series of risk management policy reviews being conducted by the OECD, identifies areas of good practice in Norway's policies for information security, as well as areas where improvements could be made. For areas that could benefit from improvement, it proposes opportunities for action and, when possible, suggests alternatives.
CONTENTS; Summary of Findings and Recommendations; Synthèse des conclusions et recommandations; Chapter 1. The Norwegian Strategy for Information Security; 1.1. Overview of the Strategy; 1.2. Policy analysis; 1.3. Conclusion and recommendations; Chapter 2. Assessing Information Security Risks; 2.1. Risk assessment in the government; 2.2. Risk assessment in critical infrastructures; Chapter 3. Protecting Information Systems; 3.1. Protection of government systems; 3.2. Protection of critical infrastructure systems; Chapter 4. Managing Incidents, Emergencies and Crises; 4.1. Incident management
4.2. Contingency and preparedness planning4.3. Emergency and crisis management; Chapter 5. Strengthening the Foundations of Security; 5.1. Awareness-raising; 5.2. Information-sharing; 5.3. Education and R&D; Bibliography; Annex 1: Terminology and Definitions; Annex 2: Acronyms and Organisations Cited; Annex 3: Methodology; Annex 4: Norwegian Institutions and Laws in the Area of InformationSecurity; Annex 5: Self-assessment Questionnaires; Annex 6: List of Interviewees; Annex 7: Members of the Steering Group
"The first country review conducted within the framework of the OECD Futures Project on Risk Management Policies."
Includes bibliographical references (p. 91-98).
The development of information and communication technologies and networks, and in particular that of the Internet, has gone hand in hand with the emergence of new types of malevolent actions called cyber-crime: viruses, worms, Trojan horses, and the like. While a number of factors make a strong case for governmental action in the area of information security, there are also important limits to what governments can achieve. This review, the first in a series of risk management policy reviews being conducted by the OECD, identifies areas of good practice in Norway's policies for information security, as well as areas where improvements could be made. For areas that could benefit from improvement, it proposes opportunities for action and, when possible, suggests alternatives.
"The first country review conducted within the framework of the OECD Futures Project on Risk Management Policies."
Computer security
Computer networks
Data protection
Information resources management
OECD Reviews of Risk Management Policies