Glossary · NIS2
CERT-SE
Sweden's national CSIRT, operated by MSB, which receives incident reports under Cybersäkerhetslagen.
Explained in depth: NIS2 incident reporting timeline
CERT-SE is Sweden's national Computer Security Incident Response Team. It monitors the threat landscape, publishes warnings and advisories, supports organisations during serious IT incidents, and acts as Sweden's point of contact in international CSIRT cooperation, including the EU CSIRTs Network. Under Cybersäkerhetslagen, CERT-SE is the operational recipient of the three-stage incident reports required by NIS2: the 24-hour early warning, the 72-hour incident notification, and the final report. Swedish in-scope entities should know CERT-SE's reporting channel before an incident occurs.
Why it matters
During an incident, CERT-SE is both a reporting obligation and a resource: they can share indicators of compromise, warn other potential victims, and provide handling support. Building familiarity with their reporting process in calm conditions is cheap insurance against a missed 24-hour deadline.