Norwegian security agency raises national cyber risk level to high

The Nasjonal sikkerhetsmyndighet publicly raised Norway's cyber risk level to high, the penultimate step on its five-point scale that ranges from very low to extremely high. Director Arne Christian Haugstøyl noted that a moderate level is the usual baseline for cyber activity, but recent trends prompted the upgrade. Over the last half-year, successful cyber attacks against Norwegian organizations have tripled, with many causing significant damage and ongoing security risks.

The agency highlighted particular vulnerability in the defence sector, the space sector, service providers linked to the security-law-bound supply chain, and operators of critical infrastructure. Haugstøyl warned that small subcontractors can be exploited as entry points to more important targets, urging all firms, even those without graded information, to implement protective measures.