NISföreskrifter

NISföreskrifter refers to regulations implementing the NIS directive within a specific country. The NIS directive, which stands for Network and Information Security, is a European Union directive designed to enhance the cybersecurity of essential services and digital service providers. In Sweden, these regulations are primarily found in the law concerning security for network and information systems for providers of essential services and digital service providers (Lag (2018:303) om säkerhet för nätverks- och informationssystem för leverantörer av samhällsviktiga tjänster och leverantörer av digitala tjänster).

These Swedish NISföreskrifter aim to ensure that critical infrastructure and digital services are resilient against cyber threats. They impose security obligations on operators of essential services, such as those in the energy, transport, and healthcare sectors, as well as on providers of digital services, including online marketplaces, search engines, and cloud computing services. Key requirements often include risk assessment, the implementation of appropriate security measures, and reporting obligations for significant incidents. The goal is to create a consistent level of cybersecurity across the EU, thereby improving the overall security and resilience of digital systems and services that are vital to the functioning of society and the economy. The relevant Swedish authorities, such as the Swedish Civil Contingencies Agency (MSB), are responsible for supervising compliance with these regulations.