Det cybersäkra Skandinavien : En komparativ innehållsanalys av Sveriges, Norges och Danmarks cybersäkerhetsstrategier

Society's digital dependence increases each time a service is digitalised. Today, storing assets and information online is standard procedure, thus creating an effective, but vulnerable, system. The protection of these digital systems is called cybersecurity, and as cyberattacks become matters of national security, strategies are created. Sweden, Denmark, and Norway are three highly digitalized countries, and therefore in need of effective cybersecurity. To ensure this, the Scandinavian countries have each developed a national cybersecurity strategy. This qualitative study aims to distinguish similarities and differences between the Scandinavian strategies and identify shortcomings in the strategies' conditions for implementation, as well as testing traditional theory of strategy on the constantly changing cyber domain. The theory this study is based on – while simultaneously being tested – is an analytical framework based on the theorization of security strategies into four components – ends, means, ways, and context – constituting the categories created in line with qualitative content analysis. The results show more similarities than differences between the strategies, as well as several shortcomings regarding coherence and limited assertions of resources. The study argues that by expanding the conceptual understanding of certain key terms within the cyber domain, traditional strategic theory can effectively be applied to cybersecurity strategies.