Only 10 Per Cent of Norwegian Business Leaders Consider Themselves Very Well Prepared for Cyber Attacks, Telia Survey Reveals

Key Points:

• Critical Readiness Gap: A comprehensive survey commissioned by Telia Norway reveals that only 10 per cent of Norwegian business executives consider themselves “very well prepared” to handle cyber attacks, while 26 per cent report being quite poorly or very poorly prepared.
• Active Exposure to Threats: According to the study, 11 per cent of Norwegian companies experienced cyber attacks within the past year, with 3 per cent suffering operational disruptions or data loss and 8 per cent absorbing attacks without confirmed damage.
• Escalating AI Vulnerability Concerns: A significant 72 per cent of business leaders believe artificial intelligence will increase their corporate vulnerability to digital intrusions over the next three years, aligning with national warnings from telecom regulator Nkom.
• Disparity by Company Size: Corporate readiness varies sharply by organization scale, as 53 per cent of businesses with over 50 employees report feeling prepared, compared to just 37 per cent among smaller enterprises.
• False Sense of Security Warning: Security experts from the Business Security Council (Næringslivets Sikkerhetsråd) warn that executive confidence often masks structural deficiencies, noting that 40 per cent of Norwegian businesses lack a designated information security lead.

Norway (Norway Post Magazine) November 4, 2026 – Only one in ten business leaders in Norway considers their organization to be very well prepared to withstand digital security breaches, according to research released by telecommunications operator Telia Norway. As reported by technology correspondents for Telecompaper and domestic Norwegian business trade publications, the findings stem from an extensive nationwide telephone survey executed by research institute Sentio Research Norge among 600 Norwegian companies during September 2026. The study highlights a troubling gap in corporate defense readiness, establishing that 26 per cent of corporate respondents acknowledge being quite poorly or very poorly equipped to counter cyber threats. Addressing the survey results, Lena Lundgreen, Head of the Corporate Market at Telia Norway, emphasized that the data underscores an urgent imperative to bolster both digital competence and operational resilience across commercial sectors. The release coincides with heightened cyber threat assessments issued by state regulatory authorities, drawing scrutiny to the systemic vulnerabilities facing Norway’s digital economy.

What are the key survey findings on attack frequency and operational damage?

As reported by telecom industry reporting desks covering Telecompaper, Sentio Research Norge’s data details the precise frequency and impact of digital intrusions targeting commercial entities over the preceding 12 months.

The survey metrics confirm that 11 per cent of all surveyed Norwegian enterprises were subjected to active cyber attacks over the past year. Within that impacted segment:

• Consequential Disruptions: 3 per cent of businesses reported that cyber intrusions caused direct negative consequences for daily operations or led to compromise of sensitive corporate data.
• Unsuccessful or Contained Breaches: 8 per cent of respondents stated that their organizations experienced cyber attacks that were successfully repelled or concluded without known lasting operational damage.

Evaluating the operational reality exposed by the data, Telia Norway executive Lena Lundgreen stated:

“The findings emphasise the need to strengthen both competence and resilience across Norwegian businesses.”

Lundgreen noted that the frequency of incidents demonstrates that cyber risks are no longer theoretical possibilities, but persistent operational realities for companies across all commercial sectors.

How are business leaders perceiving the threat posed by Artificial Intelligence?

As reported by digital security journalists tracking regulatory and corporate threat assessments, artificial intelligence (AI) has emerged as a primary catalyst for corporate vulnerability concerns.

The Telia Norway survey revealed that 72 per cent of business executives believe AI technologies will increase their company’s exposure to cyber attacks to “some extent, a great extent, or a very great extent” over the coming three years.

This corporate sentiment directly mirrors the official conclusions released in the 2026 security report by the Norwegian Communications Authority (Nasjonal kommunikasjonsmyndighet or Nkom). In its national assessment, Nkom warned that malicious actors are increasingly utilizing generative AI and automated exploitation tools to refine social engineering schemes, execute rapid automated vulnerability scans, and bypass traditional firewall defenses.

The findings also highlight a notable divergence in perceived readiness based on corporate scale:

• Large and Mid-sized Enterprises: Among businesses employing more than 50 workers, 53 per cent of leaders consider themselves very or fairly well prepared for cyber attacks.
• Small and Micro Enterprises: Among small-scale companies with fewer than 50 employees, the proportion of leaders reporting adequate preparation drops sharply to 37 per cent.

What warning did the National Business Security Council issue regarding false confidence?

As reported by national business correspondents analyzing defense readiness, security leaders urge caution against overestimating organizational preparedness based solely on executive optimism.

Reassessing the survey outcome, Bjarte Malmedal, Director of Security at the Norwegian Business Security Council (Næringslivets Sikkerhetsråd or NSR), pointed out that while Telia’s findings prove that very few leaders feel “very well prepared,” broader executive sentiment often relies on an unearned sense of safety.

Malmedal noted that NSR’s own independent research indicated that eight out of ten business leaders express confidence in their ability to handle digital threats. However, concrete operational data contradicts this optimism:

• Lack of Dedicated Security Staff: Four out of ten Norwegian businesses currently operate without a designated individual responsible for managing information security.
• The Preparedness Misconception: Malmedal stressed that feeling safe should never be confused with actual operational readiness, asserting that without formal security roles and routine threat testing, executive confidence remains misplaced.

Background of Norwegian Cybersecurity Threats and Regulatory Interventions

The survey published by Telia Norway arrives during a period of heightened national focus on digital infrastructure vulnerability and cyber espionage across the Nordic region. Throughout 2025 and 2026, Norwegian public sector institutions, critical service providers, and private enterprises faced an unprecedented volume of sophisticated cyber intrusions. National security agencies, including the Norwegian Police Security Service (Politiets sikkerhetstjeneste or PST) and National Security Authority (Nasjonal sikkerhetsmyndighet or NSM), have consistently identified state-backed APT groups and foreign cybercrime syndicates targeting energy, municipal, and telecommunications networks.

The urgency of corporate digital defense has been further complicated by security incidents within the telecommunications sector itself. In mid-2026, regulatory body Nkom announced expanded statutory supervision over Telia Norway following historical data breaches and customer data exposures. Concurrently, major regional threat reports—including Telenor’s 2026 Nordic Digital Security Report—revealed that across the broader Nordic region, only 12 per cent of organizations feel fully prepared to detect and neutralize AI-driven cyber threats. These converging factors have pushed cybersecurity to the forefront of national policy and corporate governance debates across Scandinavia.

Corporate IT Spending, Managed Security Services, and Regulatory Oversight

The stark gap between perceived cyber threat levels and executive readiness revealed in Telia Norway’s survey is predicted to drive substantial shifts in corporate governance, security outsourcing, and regulatory compliance through 2027 and beyond.

For small and medium-sized enterprises (SMEs) across Norway, the realization that 72 per cent of leaders anticipate heightened AI-driven risks—combined with a lack of in-house security staff—is predicted to accelerate reliance on Managed Security Service Providers (MSSPs). Because 40 per cent of companies currently operate without dedicated information security personnel, small business owners are expected to outsource threat monitoring, incident response, and cloud security management to third-party telecommunications and IT providers to bridge internal skill gaps affordably.

For Norwegian corporate boards and executive leadership, the survey results are predicted to force structural changes in risk management. Following warnings from the NSR, institutional investors and insurance underwriters are expected to demand formal security audits rather than relying on executive self-assessments. Consequently, corporate expenditures on automated threat detection, employee phishing simulations, and zero-trust network architectures are projected to see targeted budget increases over the next fiscal year as Norwegian companies attempt to move from passive confidence to verifiable operational resilience.