Insights Hub

NIS2 & Cybersäkerhetslagen

Cybersäkerhetslagen (SFS 2025:1506) entered into force on January 15, 2026. MCF opened registration on February 2, 2026 and says covered operators should register as soon as possible. This hub collects Vakteye articles anchored to NIS2 Article 21(2) measures, Article 23 incident reporting, MCF supervisory practice, and audit-ready evidence for covered operators in Sweden.

COMPLIANCEMay 6, 2026

NIS2 audit Sweden (Cybersäkerhetslagen 2025:1506): which evidence and documents MCF asks for

Sweden's Cybersecurity Act (SFS 2025:1506) has been in force since January 15, 2026. When MCF or PTS comes knocking, they don't audit your policy — they audit your evidence. The audit playbook: which documents and evidence they ask for, what you can test yourself today, and where documentation takes over.

Vakteye Team11 min read

COMPLIANCEMar 10, 2026

NIS2 is here: Sweden's cybersecurity act since January 2026

Sweden's NIS2 implementation (Cybersäkerhetslagen) is live since January 15, 2026. No grace period. Here's what it requires and what happens if you ignore it.

Vakteye Team7 min read