Swedish cyber incident check

Initial Notice Within 24 Hours And Incident Notification Within 72 Hours — Annual Balance Sheet Total Eur: €50 · Annual Turnover Eur: €10,000,000

The calculated result is “Preliminary Medium Or Larger Threshold Met · Initial Notice Within 24 Hours And Incident Notification Within 72 Hours”. Submit the initial incident notice to the CSIRT unit within 24 hours of awareness.

Decision path9FFA61C32ESchema 2026.01.15
Entered facts9
Staff headcount used in the size assessment90
Annual turnover used in the size assessment (€)€10,000,000
Annual balance-sheet total used in the size assessment (€)€50
The entity's applicability under the Swedish Cybersecurity Act is confirmedYes
DORA or equivalent sector rules displace these incident-reporting dutiesNo
Significant incident? (severe operational disruption, financial loss, or harm to others)Yes
Incident-notification deadline categoryStandard Operator
Initial incident notice submittedNo
Fuller incident notification submittedNo
Action required
Calculated result

Preliminary Medium Or Larger Threshold Met · Initial Notice Within 24 Hours And Incident Notification Within 72 Hours

Apply the published Swedish Cybersecurity Act interpretation to scope, size, covered activity, sector-specific displacement, significance, entity category, deadlines, and reporting status. This scenario is distinct because it produces this exact combination of calculated result, active obligations, deadlines, and required evidence.

Published by ProseIDVersion 2026.01.15
Rules activated3
Required

Submit the initial incident notice to the CSIRT unit within 24 hours of awareness

Submit the initial incident notice to the CSIRT unit within 24 hours of awareness.

Cybersäkerhetslag (2025:1506) 2 kap. 5 §
Required

Submit the trust-service incident notification within 24 hours of awareness

Submit the trust-service incident notification within 24 hours of awareness.

Cybersäkerhetslag (2025:1506) 2 kap. 6 §
Required

Submit the incident notification within 72 hours of awareness

Submit the incident notification within 72 hours of awareness.

Cybersäkerhetslag (2025:1506) 2 kap. 6 §

Change the facts

A nearby path produces a different result.

Annual balance-sheet total used in the size assessment (€)€50 → €0

The entity's applicability under the Swedish Cybersecurity Act is confirmedYes → No

Result becomesPreliminary Medium Or Larger Threshold Met · Complete And Confirm Applicability First

Inspect the changed path →

Published legal basis

Sources carried by this schema release.

The calculated path is bound to the cited version and sources. It is general information, not a substitute for advice on facts or law outside the schema.

Use your facts

Run the actual workflow.

This page shows one calculated path. Open the maintained workflow to answer with your own facts and, when needed, create a version-bound audit record.