Cybersecurity: But we have no premises!

The National Cyber Security Center recently held its first conference. Despite the seriousness of the topic, most people seemed to be in a good mood. Minister of the Interior Mikael Damberg (S) had high hopes and showed commitment to the issue. It is high time.

Several high-profile attacks, in Sweden and in other countries, have now definitely put the issues of information and cyber security on the agenda - if anyone doubts.

The main partners in the center are the Swedish Defence Radio Agency (FRA), the Swedish Armed Forces, the Swedish Civil Contingencies Agency (MSB) and the Swedish Security Service (Säpo). They are assisted by the Swedish Post and Telecom Authority (PTS), the Swedish Police Authority and the Swedish Defense Materiel Administration (FMV).

The need for better coordination and cooperation in the field of cybersecurity has long been discussed. For example, the Swedish National Audit Office made proposals in 2014, referring back to a 2007 report, and a government inquiry made similar proposals in 2015. However, at this conference, six years later, the work has not really started. FRA's Director General Björn Lyrvall said he could not fully contribute because there is no room where he dares to pull his cables and looked at the Swedish Armed Forces' representative who would apparently be responsible for login. Certainly sensible and right in substance by the FRA. However, it also illustrates the tardiness in the matter. The fault may not lie primarily with the enthusiastic authorities that are part of the center.

It is the government that has taken its time. It was not until the government declaration in January 2019 that the government announced that a center would be set up. After that, it took almost a year to task the authorities to actually do it. Of course, it hasn't been completely stagnant since 2014 or 2007, but when Sweden lags far behind comparable countries in international surveys, it's urgent. In 2021, Sweden ranked 46th out of 160 countries in the National Cyber Security Index, while Finland ranked ninth.

Worth waiting for?

One advantage is that the Cybersecurity Center is made up of authorities with different responsibilities and capabilities in the field of cybersecurity. The hope is that this could create a more seamless and coordinated approach. But how far will the limited budget decided by the government for the center go? It is SEK 50 million for 2021 and SEK 60 million for 2022 and 2023.

Clearly, coordination is needed somewhere in the government system. The conference highlighted that the Swedish model of coordination had led to a win in the prestigious Locked Shields cybersecurity competition, organized by the NATO Cyber Defence Centre in Estonia. Let's hope that it was good practice and that the center is now tackling the real problems and we are confident that the 100 people expected to work at the center in 2023 will have no problem filling their days - or their premises.

Well, the center is welcome, much needed and has very important issues on its table. The center can also become an important interface with the business community, but then you have to dare and want to collaborate - and also share.

Mutual information exchange between authorities and companies will be essential if Sweden is to seriously improve cyber security. TechSverige and our member companies wish the center's newly appointed director Therese Naess all the best and want to emphasize that we are happy to contribute to the work ahead.

Fredrik Sand
Industrial policy expert