Säpo, the Swedish security: Security must cost

"The secret service: Security must cost"

"the Fbi calls on authorities and companies to invest resources for increased security."

"– this must cost money, " says Säpochefen Klas Friberg."

"The first of april will enter a new säkerhetsskyddslag in force. It sets new tougher requirements on the authorities to protect sensitive activities and information better."

"New, is that even some of the companies covered by the requirements. It is, for example, those who care for critical infrastructure, including IT systems."

"Even if many started to work in order to live up to the new requirements, so do not expect Friberg that all meet the requirements from the first of april. He states that it remains very much work to do when it comes to both authorities and companies."

" I am well aware that the authority and the managers know this. They're working on it. but I am not equally sure that they allocate adequate resources in their budget for it security, " says Friberg."

"They must, according to him, to admit that security"

"– It can be the physical safety that must be strengthened, and it will cost money. It can be the digital security of course, " says Friberg."

"– We need an efficient digitized world and we are living in. It is a good thing. But we must acknowledge also that security must be considered for efficiency improvement."

"TT: the authorities Have received sufficient funds from the parliament and the government?"

"– It will make you question them. But it becomes an important question that we really should be able to reduce our vulnerabilities. It requires both work and investment, " says Friberg."

"For example, it costs money to strengthen the physical security of sensitive items."

"– If we think that you have sensitive data in your IT systems and you have a server that is in a basement where there are hardly any door, and there is a door so the lock is so designed that anyone can go into. How good the IT security you have, so you will have no CYBER-security, " says Friberg."

"the IT systems themselves must also be secure."

"the Law also places new requirements on the to have control on the staff who handle sensitive data."

"Säpo make over 100 000 registerkontroller every year on persons who shall be engaged to perform a security-sensitive mail."

"– But this is people, and people evolve and change. For instance, I think when you have performance reviews and other things, so it should be a natural part that the head has an opinion about the person's stability and whether it can somehow pose a risk to the confidentiality of information to which the person handles, " says Friberg."

"the Authorities and companies will need to make analyses of the information and which parts of their business that need better protection."

"– We see that many governments and companies now hiring IT managers, security managers. It is a sought-after skills. Unfortunately taken the training in Sweden, " says Friberg."