En jämförande studie av Sveriges cybersäkerhetsstrategi

Sammanfattning

This study applies a post-structural discourse analysis developed by Carol Bacchi, called the WPR-approach, on both Estonia's and the Czech Republic's cyber security policy with the purpose of comparing it to the Swedish cyber security policy. It utilizes Foucauldian ideas about how policy creates rather than discovers “problems'' through representation, and what effects this can have. The purpose of this study is to contribute to the government's work to strengthen Swedish society's cyber security policies, which includes both the public and private sectors, through analysis and comparison of two previously vulnerable countries' policy documents. By previously exposed countries is meant here exposed to socially disruptive cyber-attacks. The results show that many of the identified fundamental problems in the two equivalent policies are not taken into care by the Swedish policy. A conclusion is drawn that the Swedish cybersecurity strategy seems to fail to sufficiently address in what way knowledge-raising measures are needed, especially at the strategic levels. This is important for enabling an overall positive cyber security climate which probably affects how well cyber security will be integrated in ordinary business processes. Lack of sufficient incentive structures seem equally important to acknowledge as well as to investigate further, and perhaps there is also a need for a more ambitious approach as well as a less vague view on responsibility. Finally, as other researchers suggest, there is an urgent need to conduct significantly more research in the interdisciplinary field of cyber security.