Craton - proven solution for security protection in digital systems
Craton is the first and only product of its kind on the market that allows you to digitize your security-sensitive operations while complying with the Security Protection Act.
Craton handles the highest security requirements and has been in operation in civilian as well as military security sensitive operations for several years. From order, a full installation and commissioning of a system can take place within 6-9 months.
Built to meet the most stringent requirements of the Security Act
Craton is built to meet security protection regulations for both civilian and military operations. You get a secure system that meets the most stringent requirements, while increasing the efficiency and productivity of your security-sensitive operations.
Craton meets both the Security Police's regulations on security protection (PMFS 2022:1) and the Military Intelligence and Security Service's (MUST) requirements for IT security capabilities (KSF 3.1 High).
Craton is the only product of its kind that can handle information up to and including the Secret level, which is the second highest security classification level.
Craton is the safest route to an operating license
The operational approval process is the eye of a needle in security-sensitive activities. Obtaining operational approval requires a high level of assurance, i.e. clear and verifiable evidence that the system correctly fulfills its required security capabilities, that these cannot be circumvented and that they comply with the regulations of the Security Protection Act.
For those who run security-sensitive operations, digitalization is both an opportunity and a challenge. The requirements for security, control and traceability are high and there are clear requirements that you can prove that the work is carried out in a reliable and quality-assured manner.
For competent security-sensitive activities, where the level of impact on Sweden's security constitutes "not insignificant damage" (confidential) or "serious damage" (secret), the Security Protection Act requires written operational approval from a supervisory authority for all IT systems used.
The Security Police
(PMFS 2022:1)
MUST
(KSF 3.1)
High assurance gets you through the eye of the needle
For civilian operators, operational approval is granted through a written consultation process with the designated supervisory authority. For military operators, this is done through an accreditation process with MUST.
Craton is a standardized product with a high and continuously updated level of assurance that gives you as an operator the right conditions to achieve operational approval.
All development and management of Craton and delivered systems follow the same assurance methodology, which is based on a modern approach to IT security and which has also been used in the development of the Craton systems in operation.
Efficiency and security tend to be two opposites. Locking up your computer with classified information may comply with the Security Protection Act, but accessibility will be severely limited. This, in turn, hampers your organization's efficiency and productivity requirements.
We believe that traditional compliance solutions have reached their expiration date, shutting out security-sensitive operations from the modern way of working most people are used to. Modern ways of working that allow us, for example, to easily share and collaborate on information, no matter where we are. Without the possibility of a modern way of working, the activities that are most important for Sweden's security are excluded from the efficiency that our modern society requires.
In addition, a significant risk of traditional solutions is that the business tries to compensate for efficiency losses by finding shortcuts that are against the rules (such as taking a picture of a monitor).
Craton increases the efficiency of your security-sensitive business by enabling a modern way of working. Your employees can easily collaborate digitally on classified information between different offices.
Achieve greater efficiency in your security-sensitive operations
With Craton, you can work safely and efficiently in your classified environment and securely share information between different offices.
Guaranteed performance throughout the system's lifecycle
Craton is developed and managed as a product, providing efficient, sustainable management that builds on the economies of scale of many customers already using the product.
Craton consists of standardized, reusable services that are continuously developed with increased functionality as well as maintaining high IT security and compliance.
Thanks to Craton's built-in assurance method, compliance with the Security Protection Act is maintained over time while the system is continuously updated and further developed. Craton makes it possible to achieve high availability without compromising on security.
