the daily News revealed last week, the serious flaws in the säkerhetsskyddsarbetet at the Swedish national grid. Several managers have, in 2018, hired or have been hired, but that they were properly have security clearance. They have in their roles have access to the data covered by professional secrecy with regard to national security.
It is among other things about the head of the department for it operations and the agency's director of human resources, two services that are placed in the maximum security prison, class a. That the posts should be in this class has been decided by the government.
According to the experts of DN interviewed breaks the management against the Swedish security protection act. In addition, the Svenska kraftnät's management violated a government decree.
" The weaknesses that have emerged are severe, in particular as regards the säkerhetsskyddsarbetet. It is good that the security service is connected and that the authority to take action in view of what has emerged, said minister of energy Ibrahim Baylan (S) in a statement on Friday.
reveal that the defects became known to the director-general and the board of directors already several months ago.
In October last year, the internal auditor Eva Fredriksson alarm to Svenska kraftnät's chairman of the board Bo Netz if serious deviations. It is about the same shortcomings that the DN published about last week:
– On 26 October, the e-mail I that there are security flaws for the classification of the three managers, and I talked with the security manager about this. The task of the classification for the director of human resources, I have not known until DN posted the task, " says Eva Fredriksson.
Four days later held a telephone meeting between the internal auditor, the chairman of the board Bo Netz and a revisionskommittémedlem.
Bo Netz says that he immediately contacted the director-general Ulla Sandborgh, and told of the shortcomings. A month later, held a new meeting in which the internal auditor had to submit their data directly to Sandborgh.
But the DN's review shows that Svenska kraftnät has sounded at least two of the people have left their managerial positions. As late as the end of november, that is to say, several weeks after the alarm to the board of directors, worked with the people still in their high positions without there being a proper background check. Myndighetsledningen had not taken the problems seriously.
Ulla Sandborgh on 3 January this year, we asked questions about the background checks of specific people. Ulla Sandborgh insured that there were no deficiencies, that the agency ”conducted themselves”. Also Svenska kraftnät's press service has stated for the DN that everything was in order.
the First in connection with the publication admitted the Swedish national grid to the discovered flaws. On Friday, the same day that the DN published the news about the säkerhetsprövningarna, the head of the authority that they discovered flaws that were so severe that they are communicated itself to the security service.
the DN has for several days searched the general director Ulla Sandborgh for an interview, but she declined to answer oral questions. Svenska kraftnät has tried to downplay the shortcomings and indicated that the current managers have not taken part of some information covered by professional secrecy with regard to national security. Four independent sources reject, however, this for DN.
But whether the persons taken part of the secret data or not, however, have no legal significance, since the services are placed in a security class. At least two of them in class a, according to the government's decision.
the DN can today also reveal that one of the managers who lacked the proper security clearance – head of it-operation – in October visited a secret facility. At the time, she was not properly säkerhetsprövad.
Svenska kraftnät's chairman of the board Bo Netz confirms to DN that he in October received information from the agency's internal auditor about deficiencies with current security protection. He describes them as ”indications” and ”rumors”:
"There was nothing that could be substantiated at the time in any way," he says.
" No, it was not on the level. It was not on the konkretionen. It is good that you have an audit function that has the ears against the rails and picking up the things that she feels – and if there are indications of this kind also informs the director general and the board of directors. But the rumors go of course not to the department, " says Bo Netz.
it would was if the ”rumor” is not true, according to the internal auditor Eva Fredriksson. She says to DN that she had gotten the information confirmed by the Swedish kraftnät's head of security Erik Nordman.
He confirmed that the three chiefs had come into the premises before the background checks were done or in one of the cases of so-called paragraph-14 classification according to the Swedish security protection act.
A ”section 14-control” is not a background check without a records check for the protection against terrorism.
After Bo Netz on Tuesday got to read his quotes, he gave a different picture. He says that he was referring to the other irregularities than these deficiencies when he used the word “reputation”. In the interview he said, however, “reputation” on four occasions when he talked specifically about the security protection.
"I took seriously the data according to the Swedish national grid is protected," says Eva Fredriksson.
She has, after a recommendation from a internrevisorskollega to another authority, conducted a thorough documentation on the handling:
" I have, in chronological order, recorded the meetings I have held, which e-mails I have received and sent. I started to keep the log after I got confirmed that there were problems with the security classification for three people. I have brought shorter own notes from the meetings with the chairman of the board, general director and from the board meeting.
– I set up the log because I wanted to follow the good internrevisionssed and began to suspect that what I found out was serious and that my documentation could be requested later.
On Tuesday, decided by the Swedish national grid to request the supervision of the Fbi.