Skr. 2016/17:213 from expert authorities. Under the NIS Directive, several providers of electronic communications will be imposed with expanded incident reporting. Incident reporting under the NIS Directive is described in Chapter 2.3. However, further measures might be necessary in order to improve the information needed to support the preventive work. As supervisory authority, PTS needs to be able to obtain, coordinate and forward information and, in certain circumstances, take measures to enhance society’s access to secure electronic communications. Furthermore, in order to assess any consequences for society as a whole, PTS needs to obtain information from the operators concerning events with an impact on network security or cyber security. This also includes being able to create and forward relevant and current status reports in a crisis situation. There is also a need for PTS to be able to impose specific security measures on one or a limited number of operators in order to manage identified vulnerabilities or deficiencies that might entail serious risks to societally important electronic communications. In these cases, ordinary regulations are not appropriate since they apply to the market in general, and not only with respect to designated stakeholders, and they do not usually contain detailed requirements for specific networks and services. The need for enhanced collaboration In order to identify appropriate measures to minimise the threats and vulnerabilities that exist within the electronic communications sector, PTS needs access to relevant expertise. This expertise can be obtained from stakeholders in the sector and from expert authorities, for example. For this reason, an in-depth and systematic collaboration both with the sector’s stakeholders and between authorities in the area of cyber security and supervision constitutes a good basis for increasing expert support to the cyber security efforts of authorities that have sectoral responsibility. The Government will work to:     ensure that electronic communications networks are built in such a way that they can function independently of functions in other countries, ensure that stakeholders in the areas of public order, safety, health and defence have access to modern, secure and robust communications solutions, enhance the authorities’ expertise regarding the procurement of networks, products and systems and to ensure that the authorities guarantee that security aspects are taken into account in procurements, enhance the conditions of PTS to pursue a high level of network and cyber security within the electronic communications sector. Secure data encryption systems Objective: Access to secure data encryption systems for IT and communications solutions are to meet society’s needs. A common security measure to increase cyber security is the use of data encryption. Information that needs to be protected by means of data encryption might, in addition to information that is vital to the security of the realm, consist of healthcare data, risk and vulnerability analyses, preliminary investigations or asylum cases, for example. Data encryption solutions are currently used not only for communications in the traditional sense of protecting information that is classified or otherwise sensitive from a security perspective. Data encryption is also used to protect, for example, the signing of information (authenticity), automated processes in vital societal functions 14

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents