Regulatory Compliance Requirements for Information Systems within Vattenfall

This is a 20p master thesis project within the domain of information systems management. The project is jointly supervised by the Group CIO (Chief Information Officer) at Vattenfall and the Department for Industrial Information and Control Systems at KTH - The Royal Institute of Technology. Vattenfall is a large, multinational energy company with over 30 000 employees. Group CIO is involved in the management of the large information systems supporting business operations at Vattenfall. These systems include customer management systems, product design systems, financial systems, human resource systems, asset managment systems, production systems and many, many more. The Department of Industrial Information and Control Systems conducts research on the management of these systems.

Due to the international character of the Vattenfall Group, its information systems are subject to multiple regulatory systems. These include requirements imposed by bodies such as stock exchanges, law enforcement agencies, and tax authorities. Information technology infrastructure within Vattenfall is required to comply with German, Swedish, Polish, Finnish, Danish as well as European Union regulations..
This master thesis project aims to the following contributions:
[1] A broad overview of current regulations in the considered countries and the European Union.
[2] A set of requirements guaranteeing compliance with a subset of the regulations identified in [1], including a comparison of regulations across countries.
[3] If possible, a method for assessing fulfillment of the requirements of [2].
The project is sponsored by the Group CIO at Vattenfall.
Payment: 30 000 – 60 000 SEK