European Parliament Library

OECD Reviews of Risk Management Policies: Norway 2006, Information Security, Organisation for Economic Co-operation and Development

OECD Reviews of Risk Management Policies: Norway 2006, Information Security, Organisation for Economic Co-operation and Development
The development of information and communication technologies and networks, and in particular that of the Internet, has gone hand in hand with the emergence of new types of malevolent actions called cyber-crime: viruses, worms, Trojan horses, and the like. While a number of factors make a strong case for governmental action in the area of information security, there are also important limits to what governments can achieve. This review, the first in a series of risk management policy reviews being conducted by the OECD, identifies areas of good practice in Norway's policies for information security, as well as areas where improvements could be made. For areas that could benefit from improvement, it proposes opportunities for action and, when possible, suggests alternatives
Bibliography note
Includes bibliographical references (p. 91-98)
international or intergovernmental publication
Literary Form
non fiction
Main title
OECD Reviews of Risk Management Policies: Norway 2006
electronic resource:
Nature of contents
Oclc number
Responsibility statement
Organisation for Economic Co-operation and Development
Series statement
OECD Reviews of Risk Management Policies,, 19934106
Sub title
Information Security
Table Of Contents
CONTENTS; Summary of Findings and Recommendations; Synthèse des conclusions et recommandations; Chapter 1. The Norwegian Strategy for Information Security; 1.1. Overview of the Strategy; 1.2. Policy analysis; 1.3. Conclusion and recommendations; Chapter 2. Assessing Information Security Risks; 2.1. Risk assessment in the government; 2.2. Risk assessment in critical infrastructures; Chapter 3. Protecting Information Systems; 3.1. Protection of government systems; 3.2. Protection of critical infrastructure systems; Chapter 4. Managing Incidents, Emergencies and Crises; 4.1. Incident management4.2. Contingency and preparedness planning4.3. Emergency and crisis management; Chapter 5. Strengthening the Foundations of Security; 5.1. Awareness-raising; 5.2. Information-sharing; 5.3. Education and R&D; Bibliography; Annex 1: Terminology and Definitions; Annex 2: Acronyms and Organisations Cited; Annex 3: Methodology; Annex 4: Norwegian Institutions and Laws in the Area of InformationSecurity; Annex 5: Self-assessment Questionnaires; Annex 6: List of Interviewees; Annex 7: Members of the Steering Group
Other version
Mapped to