Skr. 2016/17:213
Collaboration and information sharing
Objective:
Collaboration and cyber security information sharing is to be enhanced.
The complexity, multidisciplinary nature and rapid development of cyber security
requires effective collaboration. Good collaboration on society’s cyber security is
important during a normal state, but also a necessity for being able to create good
operational capability to manage serious disruptions. The collaboration built up as
part of preventive efforts often lays the foundation for the collaboration needed
during serious incidents. This involves collaboration between different stakeholders
in Sweden, such as central government authorities, municipalities and county
councils, trade and industry and interest organisations, but also international
collaboration (Chapter 2.6).
There are several good examples of collaboration in the area of cyber security in
Sweden. The Cooperation Group for Information Security (SAMFI) plays an
important role through its work for secure information assets in society. SAMFI
consists of a number of central government authorities that have particular tasks in
the area of cyber security: the Swedish Civil Contingencies Agency (MSB), the
Swedish Defence Materiel Administration, the National Defence Radio
Establishment (FRA), the Swedish Armed Forces, the Swedish Police Authority, the
Swedish Post and Telecom Authority (PTS) and the Swedish Security Service. MSB
has administrative responsibility for the group. The collaborative forum, the
National Cooperative Council against Serious IT Threats (NSIT), analyses and
assesses threats and vulnerabilities regarding serious or qualified cyberattacks
against our most security-sensitive national interests. NSIT consists of the Swedish
Security Service, FRA and the Swedish Armed Forces through its Military
Intelligence and Security Service (MUST).
The Government sees a need to develop and deepen collaboration between
authorities in order to increase society’s cyber security. One example of this need is
that a number of new authorities will receive new tasks in the area of cyber security
when the NIS Directive is implemented in Swedish legislation. It is important that
collaboration is developed on the basis of a comprehensive perspective.
Public-private collaboration is a voluntary, agreed cooperation between public and
private stakeholders. The cyber security area has several examples of platforms for
public-private collaboration. One of these is MSB’s establishment of a number of
forums for information sharing (FIDI) in different sectors and areas: FIDI Telecom,
Swedish CERT forum, FIDI Finance, FIDI Health and Social Care, FIDI Operations
and FIDI Supervisory Control And Data Acquisition (SCADA). The area of
electronic communications also has the National Telecommunications Coordination
Group (NTSG). NTSG is a voluntary cooperation forum aimed at supporting the
restoration of the national infrastructure for electronic communications during
extraordinary events in society. There is a need to further develop information
sharing regarding threats, risks and security measures in order to quickly adapt the
protection of more stakeholders.
The Government will work to
enhance collaboration between authorities that have particular tasks in the
area of cyber security,
ensure appropriate information sharing and collaboration between public
and private stakeholders.
10
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents