Skr. 2016/17:213 Ensuring confidentiality, integrity and availability in electronic communications networks and services both in everyday conditions as well as serious crises and heightened alert requires continuous efforts based on the operators’ risk and vulnerability analyses and security analyses under the Protective Security Act. All operators also bear a responsibility for developing the capability to prevent, detect and manage incidents. External changes affect security demands The extent of data management is increasing in all parts of society, with demands for increased capacity, coverage, availability and not least security in electronic communications systems. The old copper networks are being phased out and replaced with fibre and mobile communications networks. To drive digital development and harness its opportunities, the Government adopted the strategy A Completely Connected Sweden by 2025 − a Broadband Strategy (N2016/08008/D) in December 2016 and For sustainable digital transformation in Sweden – a Digital Strategy (N2017/03643/D) in May 2017. The EU is currently reviewing the regulatory framework for electronic communications, and the OECD has initiated an extensive digital transformation project. Policy and regulatory frameworks need to be renewed more frequently in light of technological development and external changes. Security policy developments have resulted in the resumption of total defence planning. If stakeholders in the areas of public order, safety, health and defence are to be able to fulfil their commissions, they need to be able to communicate securely with each other, both in everyday conditions and in crises. The ambition is to as far as possible be able to maintain electronic communications within the country even in situations where the surrounding region or parts of Sweden have been hit by various types of attack. This means that electronic communications are to be able to function independently of functions in other countries. It also means an increase in the demands on operational reliability and robustness to make us better able to resist attacks and ultimately war. Support in the procurement of secure electronic communications and other ITrelated services should be enhanced It is important for the activities needing a high level of operational reliability in communications networks and IT-related services to set requirements to this effect in their procurements. This might, for example, concern the capability to quickly and effectively establish alternative links. It is also important to be able to identify and procure a level of operational reliability that is appropriate to the activities concerned. This requires expertise. PTS is the supervisory authority for the areas of postal services and electronic communications. The Authority’s work includes helping stakeholders in the sector to enhance their capability to manage serious operational disruptions, for example by providing support in the acquisition of external electronic communications. MSB also provides support regarding the secure procurement of IT-related services. The support of both authorities now needs to be developed further. In this context, it may also be mentioned that the National Agency for Public Procurement has overall responsibility for the development, administration and support of the procurement carried out by procuring authorities. The need for better decision-making documentation and targeted measures A prerequisite for effective work to prevent threats and vulnerabilities regarding electronic communications is developed coordination and collaboration between relevant stakeholders in order to identify what is to be protected and which further security measures need to be deployed. The ability to analyse current threats and vulnerabilities requires adequate information, for example, information from electronic communications operators through incident reporting and information 13