Why obtain cybersecurity certification with SBSC?
- Protect sensitive information: Ensuring that sensitive information such as personal data and business secrets do not end up in the wrong hands is critical to avoiding data breaches and damage to the reputation of your organisation.
- Prevent economic losses: Attacks and data breaches may lead to substantial economic losses, including stolen assets, fines for violations of data protection laws and result in costly restoration of the systems.
- Avoid business interruption: Cyber attacks may cause severe operational outages which impact the company’s business and revenues. Through certification, you reduce the risk of such outages.
- Compliance with laws and rules: For many companies and organisations, maintaining a certain level of cybersecurity is a legal requirement. Certification in accordance with SSF 1101 ensures that you comply with the requirements of the standard and provides a solid basis.
- Maintain confidence: By certifying your cybersecurity, you demonstrate for your customers, collaboration partners and investors that you take information security seriously, which enhances confidence in you and strengthens your competitiveness.
- Counteract cyber crimes: Certification helps you protect against threats such as phishing, ransomware and other types of cyber attacks.
The certification procedure
- You apply for certification via our Client Portal.
- You review your current cybersecurity arrangement by means of a self-declaration which we will send to you. The result will be a sort of GAP analysis that will subsequently form the basis of the measures you need to carry out in order to meet the requirements.
- An expert in cybersecurity will then review your replies and do an assessment of the security measures you have in place.
- We will reconnect with you as necessary in order to obtain additional information or clarifications based on the self-declaration. We are also available for questions, clarifications or interpretations of the requirements for certification.
- The certificate is valid for three years. We sometimes conduct spot checks in order to ensure that you are continuing to meet the requirements of the standard.
Requirements for Cyber Security BASIC LEVEL – according to edition SSF 1101
The standard
When you apply for certification with SBSC, you can download the SSF norm free-of-charge in the Client Portal.
Basic requirements
The applicant must be a legal person, and the company’s self-declaration must be signed by an authorised company signatory.
Examples of other requirements
- Strong passwords for user accounts and activated encryption of storage space when possible
- Multifactor authentication (MFA) where technically possible
- Regular checks of backup copies
- Protection against malware
- Firewalls between the company’s internal and external network
- Encrypted wireless networks
- Identify suppliers with IT services which may be critical to the organisation’s operations
- The organisation shall ensure that these suppliers have basic cybersecurity
- All employees shall undergo basic training in cybersecurity
Are you interested in ISO 27001? Read more here
Certified Cyber Security BASIC LEVEL is a sound first step in your systematic work with information security.
Advantages of certification in accordance with SSF 1101 with SBSC
- SBSC is the leading certification body within fire and safety in the Nordic region. Certification by SBSC shows your customers and standards authorities that you meet all the requirements in relevant norms and standards.
- SBSC’s certification is a confirmation that you have control over your IT security, take information security seriously and work preventatively against cyber attacks.
- SBSC’s certification increases cybersecurity in the supplier chain.
- SBSC’s certification provides solid protection against the most common types of cyber threats.
- SBSC’s certification shows that your personnel have undergone basic information security training.
- SBSC’s certification shows that you possess the right conditions to protect personal data in accordance with the GDPR.
- A certification by SBSC may be an advantage in a procurement process that involves cybersecurity requirements.
- SBSC’s certificates and certification marks enjoy substantial market value and a high level of recognition both in the industry and by customers and standards authorities and enhances confidence in your organisation.
- SBSC is one of the few certification bodies which can offer this type of certificate to small and medium-sized companies.
- We enhance your visibility online – at sbsc.se, we list all of your valid certificates and you can also showcase your logo and effortlessly inform your customers about your valid certificates. Our website gets thousands of visitors searching for certified companies, products and persons every month.