Swedish cyber incident check
The calculated result is “Preliminary Medium Or Larger Threshold Met · Use The Applicable Sector Specific Reporting Regime”. These Cybersecurity Act incident duties are displaced for the entered entity; route the incident under the applicable sector-specific regime.
Apply the published Swedish Cybersecurity Act interpretation to scope, size, covered activity, sector-specific displacement, significance, entity category, deadlines, and reporting status. This scenario is distinct because it produces this exact combination of calculated result, active obligations, deadlines, and required evidence.
These Cybersecurity Act incident duties are displaced for the entered entity; route the incident under the applicable sector-specific regime.
Cybersäkerhetslag (2025:1506) 1 kap. 10–11 §§The initial notice may be late.
Cybersäkerhetslag (2025:1506) 2 kap. 5 §Complete “Detailed final incident description, severity, and impact”.
Cybersäkerhetslag (2025:1506) 2 kap. 8 §; NIS2 Art. 23(4)(d)Change the facts
Staff headcount used in the size assessment10,000,001 → 45
Annual balance-sheet total used in the size assessment (€)€10,000,001 → €1,000
DORA or equivalent sector rules displace these incident-reporting dutiesYes → No
Result becomesPreliminary Threshold Not Met On Entered Figures · Initial Notice And Incident Notification Within 24 Hours
Inspect the changed path →Published legal basis
The calculated path is bound to the cited version and sources. It is general information, not a substitute for advice on facts or law outside the schema.
Use your facts
This page shows one calculated path. Open the maintained workflow to answer with your own facts and, when needed, create a version-bound audit record.
Cookies & storage
Essential storage keeps you signed in and secure — it's always on. With your OK we'd also use analytics to see how the product is used and improve it; analytics only runs if you allow it. See our privacy policy.