SWEDEN IMFCountryReportNo.23/135 April2023 FINANCIALSECTORASSESSMENTPROGRAM TECHNICALNOTEONCYBERSECURITYRISKSUPERVISIONANDOVERSIGHT ThisTechnicalNoteonCybersecurityRiskSupervisionandOversightfortheSwedenFSAPwaspreparedbyastaffteamoftheInternationalMonetaryFundasbackgrounddocumentationfortheperiodicconsultationwiththemembercountry.ItisbasedontheinformationavailableatthetimeitwascompletedonMarch16,2023. Copiesofthisreportareavailabletothepublicfrom InternationalMonetaryFundPublicationServicesPOBox92780Washington,D.C.20090Telephone:(202)623-7430Fax:(202)623-7201 E-mail:publications@imf.orgWeb:http://www.imf.orgPrice:$18.00perprintedcopy InternationalMonetaryFundWashington,D.C. ©2023InternationalMonetaryFund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gHEHE8@=EY@8<7B=D8B7B8HI=;8E<9H@8?GJ=HHI@H=E@E=8J<8><EOB>N@<@>=9IHA@H@>8>A@H?==@<GAHBH>E=@88H=@9J7<?E9=>B8EKE<Y7I<@I8AJ>H<E8N8H=9@B<H<=:EAY7==@7>978;EY8B8AEM7=8LC>GHH@9M<88ZH>B<>8@>H?GYE@?=9EHF@HE?9Y>;?@>=?EK;E=D=H8@=YG>9<B;H@?8=@78>HI?8><;H=8<EJ?:9H<B@E>Z87=AIBE>@C>AKYI9E<@CH8@>898@B?B@H<B9?HBIeA;HB8=87H>9=?LBH87=@=FEH>=8f<7Z=@BhK8e=>B8JEM@JB8EH<=@AH<E>98KLG:@H9IH;9M8B8HIHA>K>A<H?;@;8B7EA@8KK8=<9>=H<K=J^7K:<=<_E=H7E7>=^<:8?H@E^8=AH<B8IHB=B>Z>HNF8@A>8BAAZ@=L<HHA@G8@YB97=B7O?8K8<A7H@BY +'9ZG^9E:(_E>&;#E`@B+28c<=%CA<$*Hd@%KH^B!@Y;8_!#>89?^%=H@K%4BH^&#@79<%F!HYH(8=<8%:8A)B=%C7B4H(E@=8(#&<YX<>#G^+*=8=8+_@8E$%A+`Y9<1aN:+:E&#@EHL'7A)@,>8*B:@9%@#!:@%;=),HA;K8J,+:H&8>8YH+<&?@7#?%:-<Y!28KHOB=-@7N8!'7AH@%Y>)'!879%J)<$[<@b*EA#?<>8+B8)=D3BHD,E>8!8=I&?@7-?EB)>8'7&=%C?.*<\-GB>I4?!=?=7<B8>EB+Y+@N=?8H8=:#9YA>*%EC):@'A(J,<15AHBEBE+'EG9%<@.9)H7>=E6.4H8B8=;=*BA8B:+=F$8<O#HB8>9)9KA=,'?7ECEB5H<CNYBb+>8>$EB7%%C)=AC<!H.=?E8L&>0@9DAB!4H8>J'>5;H?9F]%Z:)&CO=M7:(?)>H;8,B#@J8<H@>8<E'G9+>B)@*=C*@8HE(KA9E+9H@H@K>#BHB<?7,=CH&H8B=;*?Z:!8>A?589@HD>=(=HJEJ9?<E=<><H4<=E8@Y: EC8<>=HE@>?H@JE<I>=HE@9>@;88i97>@Y8A;8=G88@>K=7E<H=H8BGH=7C><=H9HC>@=BJ<EI=78C<HD>=8 #%L!,H8@$>&>*I+@M+%OB!3LHZ-j@&KB)$C;%*8*?H+N9b!&=b0HC*E4<M@!FH5D8>)@,=)8L+],H@<&M8+J)>E9#@8<%AI&H#D!=>8#7=B)H8%E@(%!(@E&'H=BNH%!7JBH;>9&><>2!H=@H2)ENY#@6HJ)@E%)@<HJ=>B9H=8$:9B+i;>*<H8CBE3=<>?89H@$H>=9%:GB!HA&E78!GHJ9@E'78=%DBA&=F87(><@8B%B!e8BIA8#ZE)<>%E8kE)EBI5J<)=JC7;H%@*K8>>!=@8B@#NK<9BC)H>*>8I?@<I+D8AH<>B'YE<8N<%@8:1=9>C:HK@<3E=J7<8D*>EHBAB+C<=8H<E=<K:@BF9B=8K<8 8N"3/!:1!F$703%11!(A"<(/$%16'(?1$%"E<!F8%!CL/6?1+3:$$@!6&'"/14<!?%$4&,0(:0$:'&F+437!3#?3%C:':!.!$3%"B!C<%+;/!/:7#6!;C$0'":M.%/!<!$2%$34%$C6%!4A#/'O+:?6&C/?%E(;/!%4O6!%76"?9: 0#!5"'"+