Bibliography

Aula, I., Amundsen, R., Buvarp, P., Harrami, O., Lindgren, J., Sahlén, V., & Wedebrand, C. (2020). Critical Nordic Flows: Collaboration between Finland, Norway and Sweden on Security of Supply and Critical Infrastructure Protection. the Finnish National Emergency Supply Agency; the Norwegian Ministry of Trade, Industry and Fisheries; and the Swedish Civil Contingencies Agency.

CBS. (2025, September 18). Denmark is not ready for EU’s new cyber security rules. CBS - Copenhagen Business School. https://www.cbs.dk/en/cbs-agenda/areas/news/denmark-is-not-ready-eus-new-cyber-security-rules

Cobalt. (2024). Summary of Latvia’s new national cyber security law.

de Jesus, A., & Melander, S. (2024). From Vision to Practice – Insights from Nordic-Baltic 5G applications across sectors (No. 2024:11). Nordregio. https://pub.nordregio.org/r-2024-11-from-vision-to-practice-insights-from-nordic-baltic-5G-applications-across-sectors/index.html

European Commission. (2023a). Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on measures to reduce the cost of deploying gigabit electronic communications networks and repealing Directive 2014/61/EU (Gigabit Infrastructure Act). https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52023PC0094

European Commission. (2023b). Regions’ and cities’ digital resilience is key to prevent cyber-attacks and secure the continuity of local public services. https://ec.europa.eu/newsroom/eucor/items/845491/en

European Commission. (2024a). White Paper - How to master Europe’s digital infrastructure needs? | Shaping Europe’s digital future. https://digital-strategy.ec.europa.eu/en/library/white-paper-how-master-europes-digital-infrastructure-needs

European Commission. (2024b). The CER and NIS2 Directives enter into application. https://ec.europa.eu/newsroom/cipr/items/859754/en

European Commission. (2025a). Digital Decade DESI visualisation tool. https://digital-decade-desi.digital-strategy.ec.europa.eu/datasets/key-indicators/charts/analyse-one-indicator-and-compare-countries?indicator=rid_c_fbbtc&indicatorGroup=rid&breakdown=hh_deg3&period=2021&unit=pc_hh&country=AT,BE,BG,CY,CZ,DE,DK,EE,EL,ES,EU,FI,FR,HR,HU,IE,IT,LT,LU,LV,MT,NL,PL,PT,RO,SE,SI,SK

European Commission. (2025b). Gigabit Infrastructure Act | Shaping Europe’s digital future. https://digital-strategy.ec.europa.eu/en/policies/gigabit-infrastructure-act

European Commission. (2025c). Support for digital connectivity | Shaping Europe’s digital future. https://digital-strategy.ec.europa.eu/en/policies/digital-connectivity-support

European Commission. (2025d). NIS2 Directive: Securing network and information systems | Shaping Europe’s digital future. https://digital-strategy.ec.europa.eu/en/policies/nis2-directive

European Commission. (2025e). NIS2 Directive transposition in EU countries | Shaping Europe’s digital future. https://digital-strategy.ec.europa.eu/en/policies/nis-transposition

European Commission. (2026). The Digital Networks Act. https://digital-strategy.ec.europa.eu/en/policies/digital-networks-act

Fjäder, C., & Schalin, J. (2024). Building resilience to hybrid threats: Best practices in the Nordics. Hybrid CoE Working Paper 31.

Frontier Economics. (2022). Assessing the economic impact of EU initiatives on cybersecurity.

Information System Authority. (2022). Cyber defence of critical infrastructure | RIA. https://www.ria.ee/en/cyber-security/cyber-defence-critical-infrastructure

Information System Authority. (2023). September was a month of denial-of-service attacks in Estonian cyberspace | RIA. https://ria.ee/en/news/september-was-month-denial-service-attacks-estonian-cyberspace

KL. (2024). Bilag – til KLs høringssvar til hovedlov om NIS2. https://www.kl.dk/media/wx5pggru/bilag-kls-hoeringssvar-vedr-implementering-af-nis2-i-danmark.pdf

Kottasová, I., Stockwell, B., & Murphy, P. P. (2024, November 18). Two undersea cables in Baltic Sea disrupted, sparking warnings of possible ‘hybrid warfare’. CNN. https://www.cnn.com/2024/11/18/europe/undersea-cable-disrupted-germany-finland-intl

NIS Cooperation Group. (2024). Cybersecurity and resiliency of Europe’s communications infrastructures and networks.

Nordic Council of Ministers. (2024a). Joint statement, Nordic and Baltic Ministers of Digitalisation. https://www.government.se/contentassets/df62239cac10424b89825436635981cd/ncm-digital_joint-statement_subsea-communication-cables_2024.pdf

Nordic Council of Ministers. (2024b). Nordic-Baltic Cooperation Programme for Digitalisation 2025 to 2030.

OECD. (2024). OECD Digital Economy Outlook 2024 (Volume 2): Strengthening Connectivity, Innovation and Trust, OECD Publishing, Paris, https://doi.org/10.1787/3adf705b-en.

Regeringen. (2025). Ett starkt skydd för nätverks- och informationssystem – en ny cybersäkerhetslag (No. Prop. 2025/26:28).

Regeringskansliet. (2023). Förordningen om gigabitinfrastruktur 2022/23:FPM64. https://data.riksdagen.se/fil/0CE54F27-FCE5-40FD-8324-10CF7933ABFD

Region Norrbotten. (2025, September 9). Region Norrbotten drabbad av cyberattacken mot Miljödata. https://www.norrbotten.se/sv/region-norrbottens-nyhetsarkiv/region-norrbotten-drabbad-av-cyberattacken-mot-miljodata/

Reuters. (2024, November 18). Two telecoms cables in Baltic Sea severed, raising suspicions of sabotage. The Guardian. https://www.theguardian.com/world/2024/nov/18/telecoms-cable-in-baltic-sea-may-have-been-severed-says-finnish-owner

SOU. (2025). Snabbare bredband i hela landet: Åtgärder för effektivare utbyggnad av gigabitinfrastruktur (No. 2025:110). Regeringskansliet.

Statskontoret. (2025). Tillsynsmyndigheternas kostnader till följd av NIS2-direktivet (No. 2025:8).

Sveriges Kommuner och Regioner. (2023a). Förslag till förordning om gigabit infrastruktur KOM(2023)94) SKR:s sammanfattande ställningstaganden. https://www.regeringen.se/contentassets/c15d17f51ee24064881cc64443cbed2c/sveriges-kommuner-och-regioner.pdf

Sveriges Kommuner och Regioner. (2023b, December 21). Gigabit Infrastructure Act, GIA [Text]. https://skr.se/skr/naringslivarbetedigitalisering/digitalisering/euforordningareudirektivdigitalisering/forslag/gigabitinfrastructureactgia.70284.html

Sveriges Kommuner och Regioner. (2024). Kommunernas informationssäkerhetsarbete [Text]. https://extra.skr.se/skr/tjanster/rapporterochskrifter/publikationer/kommunernasinformationssakerhetsarbete.79736.html

Sveriges Riksdag. (2023). Förordningen om gigabitinfrastruktur (Fakta-pm om EU-förslag 2022/23:FPM64: COM(2023) 94). https://www.riksdagen.se/sv/dokument-och-lagar/dokument/fakta-pm-om-eu-forslag/forordningen-om-gigabitinfrastruktur_ha06fpm64/

SVT Nyheter. (2025, January 27). Detta vet vi: Kabelbrotten i Östersjön. SVT Nyheter. https://www.svt.se/nyheter/inrikes/detta-vet-vi-kabelbrotten-i-ostersjon

The European Parliament & the Council of the European Union. (2022). Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) (Text with EEA relevance). https://eur-lex.europa.eu/eli/dir/2022/2555/oj/eng

The European Parliament & the Council of the European Union. (2024). Regulation (EU) 2024/1309 of the European Parliament and of the Council of 29 April 2024 on measures to reduce the cost of deploying gigabit electronic communications networks, amending Regulation (EU) 2015/2120 and repealing Directive 2014/61/EU (Gigabit Infrastructure Act) (Text with EEA relevance).

Traficom. (2025, April 3). Digital infrastructure, digital services and ICT services. NCSC-FI. https://www.kyberturvallisuuskeskus.fi/en/our-activities/regulation-and-supervision/digital-infrastructure-digital-services-and-ict-services