The Norwegian government’s Total Preparedness Report for 2025 sets the framework for Norway's security and preparedness policy in the coming years, emphasizing the significant role of the private sector in national preparedness. This call to action aligns with NATO’s Mark Rutte’s December 2024 remark that we must "develop a war mindset" to effectively address modern threats. Below is a detailed summary to help private actors better understand the obligations and opportunities outlined in this report.

Here are the key points:

1. Critical Infrastructure and Societal Functions

Private sector actors own and operate large parts of the nation’s critical infrastructure, including energy, telecommunications, IT services, transportation, and logistics. The government emphasizes that maintaining continuity in these functions during crises and war is vital to societal resilience.

What does this mean for private sector actors?

• Inclusion in national preparedness plans and exercises. Companies may be asked to participate in government-organized exercises aimed at testing and improving emergency preparedness.

• New requirements for baseline security to ensure robustness against threats may be introduced. These requirements could include physical security measures, technological solutions, and crisis management procedures.

• Public authorities will strengthen collaboration with private owners of critical infrastructure to ensure better coordination and resource utilization. This may involve establishing permanent communication channels and joint preparedness forums.

2. Cooperation on Preparedness and Resources

An important topic in the report is how the private sector can contribute resources during crisis management. This includes personnel, technical expertise, and equipment that can be utilized during emergencies.

What does this mean for private sector actors?

• Companies with specialized equipment and expertise may be directly requested to support national crisis management, particularly those in transportation, construction, and healthcare sectors.
• Industrial safety units within private companies will play a larger role in the national preparedness system. They may be involved in exercises and assigned extended responsibilities during real incidents.
• Financial incentives for developing and maintaining preparedness resources may be available. This could include support schemes for investments in safety equipment and personnel training.

3. Cyber Preparedness and Digital Resilience

The report places significant emphasis on strengthening Norway’s cybersecurity, as many critical digital infrastructures are privately owned. Collaboration between the public and private sectors is essential for improving protection against cyberattacks.

What does this mean for private sector actors?

• New collaboration frameworks for sharing information about cyber threats will be established. This includes real-time sharing of information on threats, vulnerabilities, and incidents between public authorities and private companies.
• The government will facilitate the development of a stronger cybersecurity industry. This entails support for research and innovation in cybersecurity and collaboration with international partners.
• Private actors may benefit from support schemes to enhance their own security measures. This can include funding for investments in advanced security solutions and training IT personnel.

4. Securing Supply Chain Resilience

Supply chain resilience is a crucial part of total preparedness. Private actors play a critical role in ensuring access to energy, food, medicine, and other essential goods during crises.

What does this mean for private sector actors?

• Companies may be required to maintain stockpiles of critical goods to ensure supply during emergencies. This involves having adequate quantities of necessary goods readily available for rapid distribution.
• The government will strengthen cooperation with logistics operators to ensure better transport preparedness. This means the transport sector will play a key role in national preparedness plans, focusing on the rapid and safe distribution of supplies.
• Actors in the healthcare and energy sectors will face specific preparedness requirements. For healthcare actors, this may involve maintaining stockpiles of medical supplies, while energy companies may be required to secure critical infrastructure against attacks.

5. International Cooperation

The Total Preparedness Report highlights the importance of strengthening international cooperation to ensure national preparedness, particularly within NATO, the Nordic region, and the EU.

What does this mean for private sector actors?

• Companies operating internationally must prepare for increased security and preparedness requirements in their international operations. This includes securing supply chains and critical value chains against disruptions.
• Norwegian companies may participate in international initiatives for developing new technologies and preparedness solutions. Such initiatives can provide access to new markets and collaboration partners.
• It will be more critical than ever to have a clear strategy for how businesses can ensure continuity in deliveries, even during international crises. This may require investments in alternative supply routes and storage capacity.

What Should Private Sector Actors Do Now?

1. Review existing preparedness plans: Ensure that your company’s preparedness plans cover both physical and digital threats. This includes updating contact lists, crisis management procedures, and security measures.
2. Strengthen cybersecurity: Evaluate whether your company has adequate measures in place to withstand cyberattacks. This could involve implementing advanced monitoring systems and training employees in security protocols.
3. Participate in exercises and collaboration: Be proactive in participating in emergency preparedness exercises and collaboration with authorities. This will provide better insight into how your company can contribute to national preparedness.
4. Update risk analyses: Conduct regular risk assessments to better understand threats, vulnerabilities and expected consequences. This should include assessing both internal and external risk factors and implementing measures to reduce vulnerabilities.

We at OpenHorizon are here to help you interpret what the Total Preparedness Report means for your business and assist in strengthening your preparedness.