Unlock first

The tools are unlocked via the Toolbox

This tool runs in your browser. Unlock the Toolbox once with your email and you will not see this box on the other tools.

To the Toolbox

Toolbox

All tools in the Toolbox +

B Control mapping C Regulation navigator D AI risk assessment E Sovereignty assessment F Glossary and resource catalogue ↗ System tools

Appendix C · Interactive tool

Regulation navigator

Which rules apply to your organisation? Answer the questions below and get a personal list. Everything is calculated in your browser, nothing is saved or sent.

Fråga 1 av 8

What kind of organisation are you?

Determines among other things whether the regulations for central government agencies apply.

Central government agency Municipality or region Private company Other organisation
Fråga 2 av 8

Do you operate within any of the 18 sectors named in the Cybersecurity Act?

Energy, transport, banking, financial market infrastructure, health, drinking water, waste water, digital infrastructure, ICT services, public administration, space, postal and courier services, waste, chemicals, food, manufacturing, digital providers, research.

Yes No
Fråga 3 av 8

Do you have at least 50 employees, or at least 10 million euro in both turnover and balance sheet total?

The main rule for the size threshold. Some operations are covered regardless of size.

Yes No
Fråga 4 av 8

Do you conduct security sensitive operations of importance to Swedish national security?

Consult your protective security manager if you are unsure.

Yes No
Fråga 5 av 8

Do you process personal data?

The answer is almost always yes for an organisation with employees or customers.

Yes No
Fråga 6 av 8

Are you a financial entity or an ICT provider to the financial sector?

A bank, insurer, investment firm, payment service provider or similar.

Yes No
Fråga 7 av 8

Do you manufacture or place products with digital elements on the EU market?

From industrial control systems to consumer electronics and software.

Yes No
Fråga 8 av 8

Do you develop or use AI systems in the business?

Particularly relevant if AI is used in essential services or for decisions concerning individuals.

Yes No

Svara på alla frågor för att se resultatet.

Rules that are likely to apply to you

Based on your answers, the following rules are relevant to start from. The chapter references point to where the book covers them.

The navigator is a simplified decision aid, not a legal assessment. The final judgement of what applies to you should be made together with a lawyer and, for security sensitive operations, your protective security manager.

SVERIGES DIGITALA MOTSTÅNDSKRAFT

A book by Kim Borg. Published 2026.

Buy the book Toolbox The game Contact The Cybersecurity Act Terms of purchase Privacy policy

What kind of organisation are you?

Do you operate within any of the 18 sectors named in the Cybersecurity Act?

Do you have at least 50 employees, or at least 10 million euro in both turnover and balance sheet total?

Do you conduct security sensitive operations of importance to Swedish national security?

Do you process personal data?

Are you a financial entity or an ICT provider to the financial sector?

Do you manufacture or place products with digital elements on the EU market?

Do you develop or use AI systems in the business?

Rules that are likely to apply to you