© 2023 International Monetary Fund IMF Country Report No. 23/135 SWEDEN FINANCIAL SECTOR ASSESSMENT PROGRAM TECHNICAL NOTE ON CYBERSECURITY RISK SUPERVISION AND OVERSIGHT This Technical Note on Cybersecurity Risk Supervision and Oversight for the Sweden FSAP was prepared by a staff team of the International Monetary Fund as background documentation for the periodic consultation with the member country. It is based on the information available at the time it was completed on March 16, 2023. Copies of this report are available to the public from International Monetary Fund • Publication Services PO Box 92780 • Washington, D.C. 20090 Telephone: (202) 623-7430 • Fax: (202) 623-7201 E-mail: publications@imf.org Web: http://www.imf.org Price: $18.00 per printed copy International Monetary Fund Washington, D.C. April 2023 !"#$%&$!' $()#$*$%+"#,"($%#-"!#./01.2/3024567819:;<502=>73?@1/67A7B2631C4737@C37/1CD010636E.6BB16F32030AG0EE640@037/2637H76E7/I033204>276J1111B376?B03>83KL7263703172/302434101370403E6B7063C303303?7/I>JM1E0303?1326BB370631KIC7/03E6B7063637/I>J239E6C37/77NOO888K0BEK6?OH734O3OE1OE11K1HF2/PQ@RSRT !"#$"%% &'()#'*"# +(,'"'#('#-".'$## &*$'#/01 2 3456547846946:6;<576 3768==================================================>?24657 4@794AB75796;5C95C46: C5C9768====================================DEB2BF4697:465684<465=================================================================GH2 34 48C5<4IJ===================================================================GD2 @478356: CK4@776====================================================================GLM#/"'D2 8469746: C537574I75366544576BF4 49C75===================================DHG2 5C95C4;;576697 495KN:C94:F84?6J===========================D>L276676K4J57646 867O576B35=======================================================GP&,Q F4D2GHGG NRS4 49<<46:576TTTTTTTTT============================================E !"#$%% &''##(!()&(* +,#-.&"&(!()/-('#-(!'&(!$ #''$#%#('"%,+'#-%#-*#(01 #",("##!%12#-(/-%!'&(!(3('#$$&*#(0# 4!-&(*(&'&!'&.#%% &''##(!1%#('"!(3 !-)#'(/-!"'-+0'+-#-"" !-)#'+"&(#""('&(+&'1-+,567-"" !-)#' ,#-!'&(!$ #"&$&#(0#-+,567&"'-&2+'#3#(&!$/ #-.&0#&*&'!$ ,#-!'&(!$ #"&$&#(0# 0'+-,#!(!()&(* +'4-&'1+-12#- #"&$&#(0#!-3+-,#!(("+-!(0#!(3 00+,!'&(!$#("&(" +'4-&'1+-,#!((&( *#(01/-12#-"#0+-&'1+-,#!( 1"'#%&0 &")!-3+-,#!((&(&(!("&(",#)'&(#(-+%/-(/-%!'&( 4!-&(*((/-%!'&( #0+-&'1&('4#&(!(0&!$ #0'-&(!(0&!$ !-)#'(/-!"'-+0'+-# 8#3&"4#/#("# !'#-&#$ 3%&(&"'-!'&(!'&(!$#/#("# !3&"'!2$&"4%#('&(!(0&!$ '!2&$&'1+(0&$&(!(0&!$ #0'-9"+2$&0-&.!'#,#-!'&(-+,(/-%!'&(!(3%% +(&0!'&(#04($*1('#-(!'&(!$ (#'!-1+(3('#-(!'&(!$ -*!(&:!'&(/ #0+-&'&#"%% &""&("('#-(!'&(!$ -*!(&:!'&(/- '!(3!-3&:!'&((/-%!'&(#04($*1 8#3&"4&.&$('&(*#(0&#" *#(015 1(3&*4#'#(/;- !%4<$$"")133042#-#3")!,7 &)"*<$3#( 8#3&"4!'&(!$#2' //&0#!'&(!$12#- #0+-&'1#('-#-3&0&(!(0&!$ #'8-)!(3(/-%!'&( #0+-&'15&-#0'&.#7!'&(!$("'&'+'#/ '!(3!-3"!(3#04($*1-&(0&,$#"/- ,#-!'&(!$ #"&$&#(0#5 7 8#3&"4"'!(3#$#0% +'4-&'1 -&(0&,$#"/-&(!(0&!$ !-)#'(/-!"'-+0'+-#" #!$&%#-"" #''$#%#(',#-!'&(-+,/-(/-%!'&( #0+-&'1 +,#-.&"-1 #.!(3.!$+!'&(-0#""4-#!'('#$$&*#(0#!"#3'4&0!$ #3'#!%&(* !"#$%!&!'%&(#')*+%#,%-,(. %-%)&(%/ &! %!)+'*!!') 0&! ),+(&) )',!*(*-%'&( 1(*23!)#,%-,)!'.4+),+&)#