Critical puzzle piece missing as Sweden prepares for crisis.
Protecting Digital Information: A Call for Physical Cybersecurity Measures in Sweden
Recently, the Swedish government adopted a new national cybersecurity strategy. The Swedish Civil Contingencies Agency (MSB) also released an updated inventory of critical societal functions, incorporating a cyber perspective. Furthermore, the government unveiled its new digitalization strategy, with IT security as a cornerstone.
These efforts are commendable. However, the risks associated with Swedish IT security and digitalization are significant, given Sweden’s status as one of the world’s most connected and digitized nations. Unfortunately, a crucial element is often overlooked: the physical protection of electronic devices. One doesn’t need to be a high-profile figure to become a target for extortionists or foreign entities seeking access to personal information.
The technology to geolocate individuals via mobile phone GPS is readily available, making it easy to track someone’s location. Many key figures in government and leading representatives of the business community carry a vulnerability concerning their digital integrity. They carry it on public transport, in hotels, and in conference halls. Mobile phones, computers, and smartwatches are particularly vulnerable to attacks.
Without these measures, critical societal functions risk collapsing during a crisis.
Moreover, virtually all other electronic devices – from defibrillators in healthcare to security systems in nuclear power plants, police radio communications, and military rifle scopes – are susceptible to electromagnetic interference or attacks. Handheld devices and drones capable of executing EMP (electromagnetic pulse) attacks exist, potentially disabling all electronic equipment within range.
If the power outage that occurred in Spain, Portugal, and France in late April had been caused by an EMP attack, the crisis would have been far more prolonged, as nearly all electronic equipment would have required replacement.
Solutions exist to mitigate these risks, such as Faraday materials that shield electronics by blocking electromagnetic fields. These materials can be used in phone cases, laptop bags, server cabinets, entire rooms, or even temporary tents, acting as a shield around electronic devices.
Sweden must prioritize the physical and signal-blocking protection of electronic devices. This involves securing devices used by key individuals in both the private and public sectors, as well as implementing signal-blocking storage solutions and EMP-resistant cabinets. The goal is to prevent unauthorized access and protect against both data breaches and physical threats. Without these measures, critical societal functions risk collapsing during a crisis.
Therefore, we urge the government and relevant authorities to:
- Integrate physical electromagnetic protection into national strategies: Future updates to the cybersecurity strategy and MSB’s inventory should include requirements for the physical protection of digital devices, particularly signal-blocking solutions and EMP protection.
- Prioritize EMP-protected environments in the public sector: Implement requirements for EMP-protected backups and signal-blocking storage for devices within critical sectors such as healthcare, fundamental data infrastructure, and financial systems.
- Strengthen the Armed Forces’ leading role in electromagnetic protection: Develop and disseminate solutions for EMP protection of electronic equipment used by soldiers, scalable for civilian use.
- Introduce guidelines for electromagnetic protection of national leadership: Make signal-blocking cases and bags mandatory for electronic devices used by politicians, senior officials, and business leaders outside of protected environments.
Sweden’s efforts to strengthen societal preparedness and resilience are commendable, but without a focus on the physical protection of digital devices, we risk building a fragile system. By acting now, the public and private sectors can ensure that Sweden remains strong – even when threats are not only digital but also physical.
Owe Wagermark, Colonel (ret.) and Member of the Royal Swedish Academy of War Sciences
Hanna Linderstål, Security Profile of the Year 2024 and Senior Cybersecurity Advisor
Per Ängskog, PhD, Researcher and Deputy Head of Department for Electrical Engineering, Mathematics and Natural Sciences at the University of Gävle.
Enjoyed this post by Thibault Helle? Subscribe for more insights and updates straight from the source.
