All too often, cybersecurity is seen as something handled solely by the IT department.
This is one of the main reasons why overall security maturity remains low in many organizations. Especially now, as both NIS2 and the Swedish Cybersecurity Act impose requirements for governance, structure, and accountability all the way up to executive management, this view becomes particularly counterproductive, especially in a societal context given today’s threat landscape.