Skr. 2016/17:213
from expert authorities. Under the NIS Directive, several providers of electronic
communications will be imposed with expanded incident reporting. Incident
reporting under the NIS Directive is described in Chapter 2.3. However, further
measures might be necessary in order to improve the information needed to support
the preventive work.
As supervisory authority, PTS needs to be able to obtain, coordinate and forward
information and, in certain circumstances, take measures to enhance society’s access
to secure electronic communications. Furthermore, in order to assess any
consequences for society as a whole, PTS needs to obtain information from the
operators concerning events with an impact on network security or cyber security.
This also includes being able to create and forward relevant and current status
reports in a crisis situation. There is also a need for PTS to be able to impose
specific security measures on one or a limited number of operators in order to
manage identified vulnerabilities or deficiencies that might entail serious risks to
societally important electronic communications. In these cases, ordinary regulations
are not appropriate since they apply to the market in general, and not only with
respect to designated stakeholders, and they do not usually contain detailed
requirements for specific networks and services.
The need for enhanced collaboration
In order to identify appropriate measures to minimise the threats and vulnerabilities
that exist within the electronic communications sector, PTS needs access to relevant
expertise. This expertise can be obtained from stakeholders in the sector and from
expert authorities, for example. For this reason, an in-depth and systematic
collaboration both with the sector’s stakeholders and between authorities in the area
of cyber security and supervision constitutes a good basis for increasing expert
support to the cyber security efforts of authorities that have sectoral responsibility.
The Government will work to:
ensure that electronic communications networks are built in such a way that
they can function independently of functions in other countries,
ensure that stakeholders in the areas of public order, safety, health and defence
have access to modern, secure and robust communications solutions,
enhance the authorities’ expertise regarding the procurement of networks,
products and systems and to ensure that the authorities guarantee that security
aspects are taken into account in procurements,
enhance the conditions of PTS to pursue a high level of network and cyber
security within the electronic communications sector.
Secure data encryption systems
Objective:
Access to secure data encryption systems for IT and communications solutions
are to meet society’s needs.
A common security measure to increase cyber security is the use of data encryption.
Information that needs to be protected by means of data encryption might, in
addition to information that is vital to the security of the realm, consist of healthcare
data, risk and vulnerability analyses, preliminary investigations or asylum cases, for
example.
Data encryption solutions are currently used not only for communications in the
traditional sense of protecting information that is classified or otherwise sensitive
from a security perspective. Data encryption is also used to protect, for example, the
signing of information (authenticity), automated processes in vital societal functions
14
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents