Signal Protection is a method of protecting information by utilizing cryptography that prevents unauthorized access to and manipulation of telecommunications, encompassing both data traffic and voice communications.
Signal Protection is a requirement for entities that transmit or process Protective Security classified information (classified as secret concerning Sweden's security) outside an information system controlled by the operator. This is stipulated in the Protective Security Ordinance 2018:658, Chapter 3, Section 5. One method to achieve this is through cryptographic solutions, but these must be approved by the Swedish Armed Forces.
The Swedish Armed Forces further stipulate regulations regarding signal protection within total defense in the Swedish Armed Forces' Regulations on Signal Protection Service 2019:2.
Chapter 3, Section 5 of the Protective Security Ordinance states that "before Protective Security classified information is processed in an information system outside the operator's control, the operator must ensure that the Protective Security for the information in the system is adequate". This implies that if Protective Security classified information is to be communicated to an information system outside the operator's control, the information must be protected using cryptographic functions approved by the Swedish Armed Forces.
According to Section 16 of Ordinance (2015:1053) on Total Defense and Heightened Alert, the Swedish Civil Contingencies Agency (MSB) determines which other authorities shall possess secure cryptographic functions. The Swedish Civil Contingencies Agency also decides which companies, by agreement, shall be granted access to secure cryptographic functions. Furthermore, the Swedish Civil Contingencies Agency may enter into agreements for allocation with municipalities and organizations requiring secure cryptographic functions.
Security-classified information shall also be protected so that it does not generate revealing signals (RÖS) that can be read by unauthorized persons in the manner described, for example, in the Swedish Security Service's statute book on Protective Security :2, Chapter 4, Section 18, and in the Security Protection Ordinance 2018:658, Chapter 3, Section 4.
GovSec is authorized and experienced in planning and leading signal protection services. In addition, we train personnel in signal protection services, procure and implement both cryptographic equipment and cryptographic keys for security-sensitive operations, and plan protective measures against compromising emanations (TEMPEST).
