Legal Considerations on Gray Zone Operations – From a Norwegian Perspective

Threats in the digital domain is one of the, if not the most significant risks facing the individual, societies, and nation states worldwide. We are raising the question of whether the legal regulation of the digitally connected worldwide network is adequate to meet the challenges of harmful behavior to critical infrastructure. The general assumption among technical and security experts, as well as in the ongoing public debate, is that it is not. We look into the status of the current Nordic legislation, identify the main challenges, and point out future work.