HiQ Finland has been selected for NATO's <strong>Cyber Security Dynamic Marketplace (CSDM, Lot 1)</strong>. The five-year framework, with a total value of up to €500 million, gives HiQ Finland access to NATO's pre-qualified pool of cybersecurity suppliers and the opportunity to participate in future procurements.

The Cyber Security Dynamic Marketplace (CSDM) is NATO’s dynamic procurement framework for cybersecurity services. Through the framework, NATO procures cybersecurity capabilities from a selected group of pre-qualified suppliers. The selection strengthens HiQ Finland’s position as a trusted technology partner to the Finnish defence and security sector.

Being admitted to the CSDM marks the next step following HiQ’s approval as a NATO technology supplier. While the framework itself does not guarantee contracts, it provides long-term access to future procurement opportunities and enables HiQ Finland to further strengthen its relationship with NATO.

“Being selected for NATO’s framework is a recognition of the expertise we have built over many years. It strengthens our position as one of Finland’s leading technology partners in the defence and security sector and lays the foundation for a long-term partnership. Cybersecurity is an integral part of modern defence capability, and we are proud to help shape that future,” says Minna Lindholm, CEO of HiQ Finland.

Cybersecurity is embedded in every layer of modern defence capability

Modern defence is no longer built on hardware alone. Software, data and cybersecurity have become fundamental building blocks for operational capability. Finland’s NATO membership and Europe’s increased defence investments are raising expectations for how quickly and reliably cybersecurity can be integrated into mission-critical environments.

As a result, HiQ sees growing demand for partners that combine deep technical expertise with decades of experience in safety- and security-critical software development.

“A single solution is not enough if it cannot withstand cyber threats as part of a larger operational environment. Being accepted into the framework is not the finish line—it’s the starting point. It gives us access to procurements where success depends on the ability to deliver secure, compliant solutions at speed. With more than 30 years of experience in mission-critical software development, we have the capabilities NATO expects from its technology partners,” says Sami Pippuri, Business Area Director, Public Sector, HiQ Finland.

HiQ’s ambition is to become one of the Nordic region’s leading providers of digital defence and cybersecurity solutions, supporting governments and organisations with secure software, advanced simulation environments, AI-powered systems and resilient digital infrastructure.

HiQ is supporting Svenska Spel in introducing agentic AI in a secure and controlled way. The aim is to create a future-ready environment where autonomous agents can be deployed safely, with clear governance and full control. 

– Svenska Spel is taking exactly the right approach by building a secure foundation before scaling the use of agentic AI. While traditional AI mainly provides answers and recommendations, autonomous agents can take initiative and perform tasks independently, which increases the attack surface, says Pernilla Rönn, Head of Cybersecurity at HiQ. 

Autonomous agents introduce new requirements for control, transparency and governance from the outset. To enable developers and organisations to benefit from the technology without losing oversight, security must be built into the environment from the very beginning. 

As part of the engagement, HiQ and Svenska Spel are establishing security principles for the agent environment. This includes guidelines for approved AI agents and tools, as well as a structured risk and control framework for the use of autonomous AI. 

– Our role is to make security practical and achievable. We translate the risks associated with autonomous agents into concrete controls, well-designed architecture and everyday development practices. These risks can include excessive privileges, chained tool calls and decisions being made without human involvement, says Pernilla Rönn. 

The initiative enables Svenska Spel to realise the potential of autonomous AI without compromising security or regulatory compliance. 

The collaboration further strengthens HiQ’s position in AI and cybersecurity. HiQ combines advanced technology with robust security solutions and strong governance to help organisations innovate securely and build long-term, sustainable digital capabilities. 

Artificial intelligence is reshaping the cybersecurity landscape. The International Monetary Fund (IMF) is now warning that these developments could have consequences extending far beyond individual companies and banks. According to the IMF, AI-driven cyberattacks could evolve into a threat to global financial stability.

In a recent analysis, the IMF highlights how artificial intelligence enables more sophisticated cyberattacks to be carried out faster, at lower cost, and on a much larger scale than ever before. At the same time, the financial sector is becoming increasingly dependent on shared digital infrastructure, meaning that a single vulnerability could affect multiple organisations simultaneously.

“Cyber risk is no longer just an issue for the IT department. It is a strategic issue for executive management and boards, and ultimately a matter of societal resilience,” says Pernilla Rönn, Head of Cybersecurity at HiQ.

AI Increases the Risk of Systemic Cyberattacks

The IMF argues that AI lowers the barrier to sophisticated cyberattacks by automating the process of identifying and exploiting vulnerabilities. As a result, a wider range of threat actors can carry out attacks that previously required highly specialised technical expertise.

The IMF also warns that the financial sector’s reliance on shared platforms, cloud services and payment infrastructure increases the risk of so-called correlated attacks, where multiple organisations are affected at the same time.

The consequences could be far-reaching. Disruptions to payment systems, credit markets and other critical functions may lead to liquidity stress, loss of confidence and, in the worst-case scenario, threaten financial stability.

Resilience Becomes Critical in a Digital Society

Sweden is one of the world’s most digitalised societies. BankID, Swish and digital payments have become an integral part of everyday life for both individuals and businesses.

While this creates significant opportunities, it also increases dependence on reliable digital infrastructure.

“Much of our financial ecosystem is built on shared platforms and services. If a critical component is compromised, the consequences can spread rapidly across organisations and sectors,” says Pernilla Rönn.

Defences Must Evolve as Quickly as the Threats

AI is not only being used by attackers. The technology is also becoming an increasingly important tool for detecting intrusions, identifying anomalies and automating security operations.

However, the IMF stresses that investing in new technology alone is not enough. Organisations must also strengthen their resilience through robust governance, business continuity planning, incident management and regular stress testing.

The IMF calls for a stronger focus on resilience — the ability to withstand, respond to and recover from attacks when they occur, rather than focusing solely on prevention.

Cybersecurity as a Boardroom Issue

For businesses and organisations, these developments mean that cybersecurity must become an integral part of business strategy.

“The security of the future will not be determined solely by the technology organisations use, but by how quickly they can adapt to a threat landscape that changes in real time. Leadership teams need to view cybersecurity as a business-critical issue and invest in resilience, not just in new digital capabilities,” says Pernilla Rönn.

The IMF’s message is clear: as AI amplifies cyber threats, cybersecurity must be treated as an issue of financial stability, critical societal functions and long-term resilience — not merely as a technical IT concern.

The evolving security landscape and increasing regulatory requirements are driving growing demand for protective security across both the public and private sectors. HiQ is strengthening its offering in this area by appointing Anders Spalding as Head of Protective Security. 

Anders Spalding has a background as an intelligence officer in the Swedish Armed Forces and brings over 15 years of experience in intelligence operations and military security and counterintelligence. He has subsequently worked in protective security, both as a consultant and in a role responsible for personnel security at Bankgirot. 

– Requirements for protective security are increasing rapidly, while many organisations lack the experience and structure needed to meet them. With Anders, we are strengthening our ability to support clients in managing these demands, both operationally and strategically, says Pernilla Rönn, Head of Cybersecurity at HiQ. 

This initiative also reflects growing demand from existing clients, where security has become a more central part of operations. 

– Protective security is an area where many organisations are undergoing a shift. It is not enough to comply with regulations. Organisations also need to understand how threats emerge in practice. I look forward to contributing that perspective, says Anders Spalding. 

HiQ strengthens its position across the full security spectrum 
As total defence considerations become more prominent, an increasing number of organisations are subject to protective security legislation. This places greater demands on everything from security vetting and background checks to long-term efforts to identify and mitigate insider-related risks. 

With this appointment, HiQ strengthens its position across the full security spectrum, from cybersecurity to protective security and national security. 

– Security needs to be managed as a whole. With this initiative, we can support our clients across all areas, from information security to personnel security and physical security, says Pernilla Rönn.