Security protection analysis
Security protection means protection of security-sensitive activities or data - against espionage, sabotage, terrorist attacks and other crimes that may threaten the activities.
As an authority, KI carries out security analyses to assess the need for measures linked to the Security Protection law. The purpose is to determine whether any part of the organisation is deemed to be security-sensitive with regard to Sweden's security, and if so, what needs to be done.
Security protection analyses are carried out for data protection, IT security, physical security and information security.
Who should do security protection analysis?
Authorities and private actors who carry out security-sensitive activities, based on the Safety Protection Act, must investigate the need for measures and document it in a security protection analysis. The security protection analysis is important for one
structured and systematic safety protection work and is a prerequisite for to be able to take the necessary measures.
The security protection analysis must provide answers to:
• What is to be protected?
• Against what, why is the protection needed?
• How should it be protected?
Security-sensitive activities
Security-sensitive activities are those that are of importance to Sweden's security, in the following categories:
- Sweden's external security
- Sweden's internal security
- Activities of national importance to society
- Activities of importance to Sweden's economy
- Activities that can generate damage to other security-sensitive activities
Security classified information
Security classified information refers to information relating to security-sensitive activities, and which is therefore covered by secrecy under the Public Access to Information and Secrecy Act (“Offentlighets- och sekretesslagen”)(2009:400), or which would have been covered by secrecy under that act if it had been applicable.
This could, for example, be a project that handles information about security-sensitive activities conducted by another organisation or external party.
Read more about security protection analysis in the security police's guidelines.