Capacity beyond the factory
Norway’s raised sabotage warning puts the defence supply chain inside the protection perimeter. Norway’s Police Security Service names defence industry, the businesses serving it and logistics operations among possible targets. It also says it has detected no sabotage attempt against Norwegian targets. The practical starting point is that specific warning: the firms carrying production and delivery already form part of the capability that needs protection.[1]
A factory’s stated capacity gives an incomplete account of sustainable force if the services it requires are treated as automatically secure. The service’s explicit inclusion of logistics providers matters for that reason. Material becomes usable capability through functioning supply and transport. A protection plan centred solely on the main manufacturer leaves supporting services outside the assessment. My reading of the warning is that readiness requires attention to those dependencies as well.[1]
Little preparation, substantial damage
Norway’s Police Security Service considers completed operations alongside thwarted plans and attempts. It reports a renewed increase in European incidents in 2026 after a decline in 2025. Its list of methods includes arson, explosives and drones, with arson capable of causing substantial damage after little preparation. That variety argues for assessing more than attacks involving sophisticated weapons. Preparation and destructive effect need not be proportional.[1]
The warning about proxies points in the same direction: a recruited person may not know that a state is behind the task. Making protection depend entirely on identifying the sponsor in advance is therefore a weak choice. Knowing normal operations and noticing departures offers a more practical starting point. Treating every unusual incident as a Russian operation would disperse attention. Preserving uncertainty about attribution remains compatible with taking protection seriously.[1]
The practical protection question
Norway’s Police Security Service says actors connected to Russian intelligence have mapped infrastructure in Norway and asks businesses to report unusual activity. Its simultaneous statement that no sabotage attempt has been detected defines the warning’s evidential limit. The observable change today is the revised assessment and protection advice. It supplies no basis for calculating a particular factory’s lost output or dating an approaching attack.[1]
The concrete readiness question is whether a critical supplier can recognise a departure from normal operations and pass it to the appropriate authority. That is the basis of Norway’s Police Security Service’s appeal. Protection of logistics belongs in the assessment of sustainable force before there is a completed attack to count. Its justification still needs to stay proportionate to the evidence: an intelligence service has raised its threat assessment, while no Norwegian sabotage attempt has been detected.[1]