Open-Source National Security Infrastructure for Sweden’s National Security Apparatus

This paper investigates whether core IT infrastructure implemented using open-source software and infrastructure-as-code techniques can achieve compliance with selected information security requirements defined in Chapter 4 of PMFS 2022:1.

A proof-of-concept environment was designed and implemented to evaluate technical solutions against the specified technical security controls. Using qualitative analysis, the study examined both the practical behavior of the proof-of-concept and the capabilities and limitations of the open-source services comprising the core infrastructure.

The assessment focused exclusively on technical compliance and feasibility, deliberately excluding administrative and operational risk considerations. The results demonstrated that, when appropriately designed and implemented, core infrastructure based on open-source software and with infrastructure-as-code techniques can meet the selected information security requirements outlined in Chapter 4 of PMFS 2022:1.