Cyber Security in Procurement of Third-Party Suppliers: A Case Study of the Norwegian Power Sector

The Norwegian power sector is currently experiencing an increasingly complex supply chain, affected by digitalization. This case study examines how digitalization has changed the procurement of third-party suppliers of Information Technology (IT) and Operational Technology (OT), focusing on cyber security, in the Norwegian power sector. The thesis investigates why cyber security in current procurements of third-party suppliers is challenging, in addition to how it is possible to make better decisions with the procurement of third-party suppliers. Literature findings originating from our Systematic Literature Review (SLR) identifies the need for conducting an exploration of procurement chall…