Category Guides

In our experience, a working ISO 27001 management system provides around 80 per cent of the structure the Swedish Cybersecurity Act requires. Here is what overlaps and what the Act adds.

Financial entities within the scope of DORA follow DORA for ICT risk management and incident reporting. For other organisations the Swedish Cybersecurity Act (NIS2) may be the central regime. How to decide which applies to you.

20 questions give a first indication of whether the GDPR, the Cybersecurity Act, DORA, the CRA and the AI Act affect you, and in what role. Instant result.

A quick check against ISO 27001: 12 questions on the ISMS, or 20 with Annex A. The result appears straight away, red to green, with suggested next steps.

20 questions for manufacturers show how far you have come with the Cyber Resilience Act: secure development, vulnerabilities, reporting and documentation.

20 questions in five areas show how far you have come with DORA: governance, ICT risk, incidents, testing and third-party risk. See the result straight away.

20 questions in five areas show how far you have come with the Swedish Cybersecurity Act and its regulations. The result appears straight away, red to green.

20 questions in five areas show whether the basics of your GDPR work are in place. Takes 15 minutes and shows the result straight away, red to green.

A defined gap analysis against ISO 27001 or the Swedish Cybersecurity Act (NIS2) normally costs from around SEK 25,000 excluding VAT. Scope, depth and purpose decide. How to compare quotes.

Five steps to assess whether your organisation is affected by the Swedish Cybersecurity Act: sector, size, public administration, DORA and the essential or important category.