Skr. 2016/17:213 Industrial information and control systems are characterised by technical complexity and by very diverse ownership and operating conditions. Managing the challenges in this area requires a comprehensive effort that includes both the private and public sectors. The work needs to be cost-effective and cross-sectoral. In order to achieve adequate protection, there is a need for greater collaboration and cooperation between system providers, technical consultants, procurers, operators, relevant authorities and academic environments. A high level of cyber security in industrial information and control systems has the potential to constitute a significant competitive factor for Sweden. If high-security products can be developed in Sweden, they will be more internationally competitive and thereby contribute to employment in Sweden. Today, a large part of the training, research and development in this area is conducted under the National Centre for Security in Control Systems for Critical Infrastructure (NCS3), which is jointly run by MSB and the Swedish Defence Research Agency (FOI). NCS3’s activities aim to reduce the risks that the use of industrial information and control systems entails for modern society, especially with regard to intentional disruption. The Swedish Governmental Agency for Innovation Systems (Vinnova) and the Research Institutes of Sweden (RISE) are also working actively on projects for developed security in industrial information and control systems. The Government will work to   2.3 ensure that companies and authorities that own or work with critical infrastructure that include industrial information and control systems receive support in their efforts to enhance cyber security, ensure that companies with activities in industries such as engineering and processing, where industrial information and control systems have important functions, receive developed conditions for support to enhance their cyber security efforts. Enhancing capability to prevent, detect and manage cyberattacks and other IT incidents Objectives:  The capability to prevent, detect and manage cyberattacks and other IT incidents in society is to be improved.  Relevant stakeholders are to be able to take coordinated action to manage cyberattacks and other serious IT incidents.  There is to be a developed cyber defence for the most security-sensitive activities in Sweden, with a strengthened military capability to meet and manage attacks from qualified opponents in cyberspace. The basis for reducing the effects of cyberattacks and other IT incidents consists of the capability to prevent, detect and manage them. A large part of the preventive work has been described in Chapter 2.1 about securing a systematic and comprehensive approach in cyber security efforts and in Chapter 2.2 about enhancing network, product and system security. Another important component of the preventive work consists of IT incident reporting, which includes facilitating a continuous learning from events that have occurred. Since April 2016, most central government authorities have been required to report IT incidents that might seriously affect the security of the authority’s information management to MSB. In order to improve awareness of the national situation, MSB’s instructions 16