Services
Protective Security Procurement (SUA)
SUA is the Swedish process for procurements and assignments covered by requirements under Swedish protective security legislation. When an assignment involves access to security-sensitive activities or classified information, the supplier may have to meet specific protective security requirements. Northseq helps companies understand those requirements and build the processes, routines and documentation needed to work systematically with SUA.
We help your organisation prepare for a protective security procurement and translate the client's protective security requirements into a practical, documented way of working.
The work is adapted to the scope of the assignment, the applicable security protection agreement and the client's requirements. The goal is a process that works from the first procurement assessment through delivery, control, follow-up and closure.
When is it relevant?
- Ahead of a bid in a Swedish protective security procurement
- When a security protection agreement is to be signed or renewed
- When the client sets requirements you have no internal equivalent for
- Ahead of the client's protective security inspection or SUA audit
- When subcontractors are used in a security-classified assignment
How we work
- 01
Requirements
We review the requirements of the procurement and the security protection agreement and what they mean for your operations.
- 02
Gap analysis
We compare the current state with the requirements and prioritise the gaps that need to be closed first.
- 03
Process
We build a coherent SUA process with roles, routines and documentation.
- 04
Follow-up
We prepare internal control, training and a review ahead of the client's inspection.
What we can help with
Current-state and gap analysis against applicable protective security requirements. Development of a coherent SUA process. Clear allocation of roles, mandates and responsibilities.
Routines for information security, physical security and personnel security. Governing and record-keeping documentation. Handling of personnel and subcontractors.
Routines for incidents, deviations and changes. Internal control and quality assurance. A preparatory review ahead of the client's inspection or audit.
Training for management, line managers and affected staff, plus follow-up and continuous development of the protective security work.
The outcome
You get a clear, documented and business-adapted process that creates the conditions for meeting the requirements of the security protection agreement, for showing how the protective security work is carried out, and for being better prepared for the client's review and follow-up.
What you get
- Gap analysis against the client's protective security requirements
- A documented SUA process with roles and responsibilities
- Routines for information, physical and personnel security
- Governing and record-keeping documentation
- Routines for subcontractors, incidents and changes
- A preparatory review ahead of inspection and follow-up
Connected to Resilience
The SUA process is built as a long-term part of the security work, with clear governance and follow-up.
Frequently asked questions
- What is SUA?
- SUA is the Swedish process applied when a supplier gains access to security-sensitive activities or classified information. The client sets protective security requirements, regulated in a security protection agreement.
- What is required of us as a supplier?
- It depends on the agreement level and the access involved, but usually documented routines for information, physical and personnel security, security vetting of affected staff and control of subcontractors.
- Does Northseq guarantee approval?
- No. We help you identify and remedy gaps and create the conditions for meeting the requirements, but approval is always decided by the client and the relevant authority.
- How do we prepare for a SUA audit?
- We carry out a preparatory review of the process, the documentation and the practical routines, and test how well the organisation can demonstrate systematic protective security work.
Facing a protective security procurement?
Tell us briefly about the assignment and the requirements and we will propose an approach.