Norway : information security - Mansfield, Nick (OECD reviews of risk management policies, 2006)