Skr. 2016/17:213 When many stakeholders are dependent on each other in their information management, it is also necessary to coordinate measures to reduce risks and maintain the level of security. Stakeholders whose cyber security is inferior can jeopardise the security of the others. This is of significance to the potential for a digitally collaborative administration, but also to the resumed planning of civil defence that is dependent on good conditions for sharing sensitive information within public administration. Although the individual organisation is ultimately responsible for managing its information, in the Government’s assessment it is important to improve the conditions for conducting systematic cyber security efforts in a more coordinated manner. To achieve this, there is a need to carry out activities such as performing risk assessments, mapping security-sensitive assets and determining levels of protection with associated security measures based on and supported by a common model for systematic cyber security efforts. Such a model aims to constitute a common platform for systematic cyber security efforts and to be able to coordinate and collate regulations, methods, tools, training, etc. at the authority level in a readily available manner. It is assessed that a national model will contribute to stakeholders making more uniform assessments of threats, risks and security measures, thereby attaining a similar and adequate level of protection for similar data and information systems at different operators. There are many advantages of a national model for systematic cyber security efforts. If the authorities that have a particular responsibility in the cyber security area, and the other authorities that, e.g., have a regulatory or supervisory role in the area, actively contribute to the national model, this can counteract fragmentation of steering and increase collaboration in the area. This will make it easier for organisations to address relevant requirements and control their cyber security efforts, while making more effective use of the competence of the expert and supervisory authorities. Since the national model will be based on recognised standards, and will be flexible and scalable, activities with different conditions can benefit from the model. It is also expected that more uniform assessments of security measures will be able to bring positive effects both for those procuring security solutions and those supplying them. Developing a large number of unique but similar solutions is not rational for either customer or supplier. The national model’s ability to contribute experience-based knowledge of appropriate requirements could help to increase overall procurement expertise. The main purpose of a national model for systematic cyber security efforts is to raise the lowest level of cyber security. The first stage should focus the model on central government authorities, but the model should be designed with the goal of benefiting the entire public sector, other organisations and companies. The Government’s intention is that a national model for systematic cyber security efforts will be able to develop in a way that also facilitates the Government’s monitoring of cyber security efforts in public administration. The Government will work to   increase the clarity of authority governance and highlight the importance of satisfactory cyber security efforts internally at the authorities, improve the conditions for the different stakeholders in society to conduct systematic cyber security efforts and make more uniform assessments of threats, risks and security measures, through the development of a national model for systematic cyber security efforts. 9