Legal, consulting, project leadership and know-how hub. Based in Sandvika, Norway.
Challenge
In order to effectively protect nation’s critical infrastructure, a government must have a prepared methodology for critical infrastructure identification that is relevant to the situation of a particular country. No information infrastructure is critical per se unless it automates the provision of a critical service, and criticality is not equal to importance.
Our approach
NRD companies have experience in assisting governments in dealing with this complex task by:
- Preparing an analysis of National critical information infrastructure identification methodologies and protection practices in at least two foreign countries;
- Identification and assessment, including gap analysis, of standing laws and regulations that are pertinent to the Critical Information Infrastructure identification;
- Preparing criteria for Critical Information Infrastructure identification;
- Identifying roles and responsibilities in Critical Information Infrastructure identification;
- Preparing methodology for Critical Information Infrastructure identification and classification;
- Assisting the Client to putting the drafted methodology into law;
- Preparing action plan for Critical Information Infrastructure identification and classification.