The cyber operations of the Civil Defence Agency (Myndigheten för civilt försvar, MCF) have been transferred to the Swedish Signals Intelligence Agency (Försvarets radioanstalt, FRA) as of 1 July. This consolidates further national cybersecurity functions within the National Cybersecurity Centre (Nationellt cybersäkerhetscenter, NCSC), which has been part of FRA since November 2024.
According to a joint press release from FRA and NCSC, the change is part of the Swedish government's work to strengthen Sweden's overall cyber capability by consolidating operational and strategic cybersecurity functions within a single agency.
"I would like to extend a warm welcome to our new colleagues from MCF at FRA. They bring valuable expertise that will complement FRA's existing cyber operations," said FRA Director General Björn Lyrvall in a press release.
The operations from MCF are being transferred in their entirety, meaning that expertise, assignments, responsibilities, and functions within the cybersecurity domain will all follow. According to FRA, support for government agencies, municipalities, regions, the business community, and other critical societal actors will continue as before.
The change also gives FRA an expanded national mandate. Sweden's national Computer Security Incident Response Team (CSIRT) function, CERT-SE, is being incorporated into FRA through NCSC, while the agency also becomes the national cybersecurity hub within EU cybersecurity cooperation and the national cyber crisis management authority. FRA is also taking over responsibility for Sweden's National Coordination Centre for research and innovation in cybersecurity (NCC-SE), the coordination of supervisory authorities in the cybersecurity domain, and the role of technical contact point for Sweden within the Organisation for Security and Cooperation in Europe (OSCE).
"As more national cybersecurity tasks are now consolidated at FRA, the agency's mandate is further broadened. This means that the responsibility increasingly encompasses cybersecurity for society as a whole, from incident management and coordination to support and international cooperation," said Björn Lyrvall in the press release.
The Director General of the Civil Defence Agency, Mikael Frisell, emphasised at the same time that the two agencies will continue to cooperate following the transfer.
"Cybersecurity and civil defence are closely interlinked. Even as operations move to FRA, our agencies will continue to work closely together. This is an important prerequisite for strengthening society's resilience and ability to manage crises and, ultimately, war," he said in the press release.
Nordic Defence Sector has previously reported on the government's stepwise reorganisation of national cybersecurity work. In April 2023, the government announced that FRA would become the principal authority for the National Cybersecurity Centre. From 1 November 2024, NCSC was placed organisationally within FRA, and in November 2025 the government decided that the operational and strategic cyber operations would also be transferred from the then Civil Contingencies Agency (Myndigheten för samhällsskydd och beredskap, MSB) to FRA no later than 1 July 2026. The transfer now completed marks the final step in that reorganisation.