Antura Information Security Management Overview

This document is a technical report that outlines Antura's systematic approach to information security management, which is based on ISO 27001:2022, GDPR, and the requirements of NIS2/the Swedish Cybersecurity Act. It details the various components of Antura's information security practices, including risk management, policies and procedures, secure development, operations, access control, and incident management. The report emphasizes the necessity for ongoing follow-up, audits, and training to maintain compliance and enhance security. Additionally, the document describes the implications of the NIS2 regulation, which aims to establish a high standard of cybersecurity across the EU and has been implemented in Sweden through the Cybersecurity Act effective from January 2026. Central obligations for organizations under this regulation include assessing their coverage, implementing security measures, and reporting significant incidents. The comprehensive framework established by Antura provides support for customers evaluating suppliers against these requirements.