Skr. 2016/17:213
such as critical infrastructures (availability) and the monitoring of how and when
information has been managed and communicated.
Some organisations have a need to protect information that is classified with
reference to the security of the realm and have a need for communications security.
The term communications security refers to the mandatory protection of electronic
communications of classified information concerning the security of the realm. The
protection level of the communications security systems is dimensioned to meet the
threat scenario from other countries’ intelligence services and therefore requires
extensive protective measures. Sweden needs to have access to technical expertise in
the area of data encryption to guarantee necessary communications security, for
ordinary activities and when society is subjected to stress. The maintenance of such
national expertise over time is therefore important for safeguarding Swedish security
interests in the area.
The need for secure data encryption solutions is increasing in pace with digital
transformation. The resumption of civil defence planning will also entail a greater
need for secure data encryption systems, especially communications security, for the
stakeholders in society affected by this planning work. There is also a greater need
for communications security to enable developed collaboration with other states and
international organisations, particularly within the EU and NATO.
To meet this greater need for data encryption solutions, the Government has
recognised a need for a national strategy and action plan for secure data encryption
systems. In its appropriation directions for 2016, the Swedish Defence Materiel
Administration was therefore commissioned to present a detailed proposal for a
national strategy and action plan for this, after consultation with the Swedish Armed
Forces, FRA and MSB.
The Government will work to
implement a national strategy and action plan for secure data encryption
systems.
Security in industrial information and control systems
Objective:
Security in industrial information and control systems is to increase.
Industrial information and control systems, often termed Programmable Logic
Controller (PLC) or SCADA, are used in critical infrastructure to control and
monitor central physical processes. These control systems (software and computers)
are integrated into, and interact with, physical objects. With the emergence of the
Internet of Things, there is also a sharp increase in the number of connected control
systems in many areas.
Both the report Cyber security in Sweden (SOU 2015:23) and the report on a new
Protective Security Act (SOU 2015:25) stress the critical infrastructures’
dependence on industrial information and control systems and the importance of
maintaining a strong national expertise in the area of control systems. Securing the
functionality and security of industrial information and control systems constitutes a
very important part both of preventive work and of the management of disruptions to
central societal functions, such as the electricity and drinking water supply.
Disruptions in areas such as transport systems, industrial production and healthcare
are also examples where preventive work is important. Disruptions might have their
origin in mistakes of operation or be due to faults in hardware or software, but might
also be the result of antagonistic activities.
15
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents