Monitoring cybersecurity levels in the public and private sectors

PUBLIC SECTOR

MSB is tasked with raising the level of cybersecurity across both public and private sectors through several government mandates, including providing a comprehensive overview of cybersecurity status in Sweden. Cybersäkerhetskollen (the Cybersecurity Check) is MSB’s tool for tracking society’s cybersecurity progress, particularly among NIS‑regulated entities. In spring 2025, Knowit assisted in further developing the tool and formulating questions related to OT (Operational Technology) security.

CHALLENGE

A comprehensive, well-formulated, and manageable cybersecurity questionnaire

Cybersäkerhetskollen serves two key purposes: offering MSB insights into Sweden’s cybersecurity posture and enabling Swedish organizations to assess their own efforts. The tool currently includes question sets covering information security, IT security, OT security, and supply chain security. Initially, only the comprehensive "Infosäkkollen" (information security) and a preliminary version of "It‑säkkollen" (IT security) were available.

Designing an effective question set posed a significant challenge—it had to be comprehensive yet concise and not overwhelm respondents.

SOLUTION

A set of representative questions for a broad range of Swedish organizations

Knowit supported MSB in crafting and implementing the OT‑säkkollen (OT security questionnaire). Given the broad scope of OT, the questions were carefully tailored and based on the IEC 62443 standard. The aim was to select representative yet streamlined questions applicable across diverse Swedish organizations. Rigorous testing ensured the questionnaire was both well‑formulated and manageable, while still covering extensive ground in cybersecurity.

RESULT

Enhanced monitoring of Swedish cybersecurity

With Knowit’s contribution, Cybersäkerhetskollen has evolved to reflect the support that Swedish organizations need to monitor their cybersecurity efforts effectively, while allowing MSB to gain a clear view of the nation’s cybersecurity status. The inclusion of the OT‑säkkollen fills a previous gap, making the tracking tool far more comprehensive. Today, Cybersäkerhetskollen is a well‑known instrument among Swedish organizations, bolstering the country’s cybersecurity initiatives.

About MSB

The Swedish Civil Contingencies Agency (MSB) is a government authority responsible for enhancing and coordinating Sweden’s civil preparedness and resilience against accidents, crises, and threats to the country’s security.

How the solution contributes to Agenda 2030

Goal 9 – Industry, innovation, and infrastructure: By enhancing cybersecurity across both public and private sectors, the solution helps protect and strengthen digital infrastructure—vital for resilient societal operations and innovation in areas such as energy, transport, and digital services.

Goal 16 – Peace, justice, and strong institutions: Cybersäkerhetskollen supports legal security and data protection by equipping organizations with tools to monitor their security efforts, fostering trust in digital services and reinforcing institutional resilience.

Goal 17 – Partnerships for the goals: This project exemplifies effective collaboration between government and industry: Knowit and MSB worked together using international standards (like IEC 62443), promoting knowledge sharing and united action toward sustainability objectives.