Many organizations are working intensively on digitalization and new developments. New solutions, modern frameworks and cloud platforms are often in focus. At the same time, older systems continue to live on in the background. They often carry mission-critical functions, but rarely receive the same attention. From a cybersecurity perspective, this may be where the greatest risks lie.

Technical debt as a security risk

Building on existing code is common. Many systems have evolved over several years with different developers, tools, and requirements. The result is often a complex environment that is difficult to monitor and maintain, which also affects security.

Old components and dependencies are not always updated and may contain known vulnerabilities. Code written in another era often lacks modern security principles. Accountability can be unclear, especially in systems that many people have worked with over the years. Older integrations can create unexpected attack surfaces. And when the focus is on new development, the old easily falls into the shadows.

Thinking “it still works” is human, but that’s precisely why old systems can become the weakest link in an organization’s security.

Therefore, we must secure the old

Security work is not just about new projects and technologies. Older systems are often a central part of the business, and a vulnerability there can have major consequences. An outdated API, a forgotten server, or a library that hasn’t been updated in years can open up avenues that no one is monitoring anymore.

Taking responsibility for cybersecurity therefore also means taking care of what we have already built.

How development teams can act

There are several ways to reduce risks in legacy systems:

• Map dependencies and versions to understand what is actually being used.
• Perform security audits even on legacy code. Automated analysis and penetration testing often reveal more than you think.
• Plan for refactoring where needed. Security is a strong argument for modernization.
• Strengthen protection around legacy systems through better access controls, logging, and monitoring.
• Invest in skills development. Awareness and knowledge are often the most effective protection.

A cultural issue as much as a technical one

Security is not just about code, it’s about culture and priorities. If older systems are seen as something to “be replaced later,” they risk being left out of security efforts. But if we instead view them as an active part of our security environment, it’s natural that they will be subject to the same demands for quality, follow-up, and improvement as new solutions.

Old systems are not just a cost. They are part of the organization’s digital backbone – and therefore also part of its security.

Summary

Cybersecurity is about integrity and long-term thinking. New systems should be built secure, but what we already have must be managed with the same care. Legacy environments will rarely disappear overnight, but risks can be reduced with the right strategy, the right skills and a culture that takes security seriously.

Upgraded People continues its strong growth journey and has a turnover of SEK 1,314 million during the first nine months of the year – an increase of 8.0% compared to the same period in 2024.

– We see a continued positive trend where we are gaining market share and strengthening our position in several of our markets. It is a clear testament to our strong offering and the team’s ability to deliver value to both clients and candidates, says Birgitta Hedegård, CEO of Upgraded People.

During the third quarter of the year, Upgraded People welcomed several new customers. In particular, the company has strengthened its position in the public sector by winning procurements with several municipalities. The most notable deal of the quarter is the win of an exclusive framework agreement with the Swedish Tax Agency for the mediation of IT and AI skills. The agreement, “IT consulting broker”, has a estimated value of SEK 5.55 billion and runs over four years. Upgraded People are sole supplier awarded the contract.

In addition to the Swedish Tax Agency, the agreement also covers The Swedish Enforcement Authority, the Election Authority, the Payment Authority and the Tax Law and Research Tax Board. The aim is to strengthen digital administration through flexible supply of skills in areas such as AI, systems development, architecture, security and management.

“This assignment is proof that our way of working makes a difference. As a sole supplier, we now have the opportunity to actively contribute to shaping the digital public services of the future – where AI and automation play a central role,” says Birgitta. The framework agreement will enter into force in autumn 2026 and is valid for four years.

Continued strong growth in Sweden and internationally

During the first nine months of the year, Upgraded People has continued its expansion in both the Swedish and international markets. Interest is particularly increasing in Germany, Norway and Denmark, where the company sees a stable demand for qualified IT and management skills.

Despite geopolitical unrest and US trade discussions, there is a noticeable no negative impact – on the contrary, the company notes a continued increasing influx of inquiries.

Demand is strong in several industry segments, including banking and insurance, defense, infrastructure, energy and manufacturing industry. Even areas like cyber defense, AI as well as organizational and management services continue to grow in scope.

– “We are convinced that success is built through long-term and value-creating collaborations. By combining action, innovation and new thinking, we create solutions that make a real difference – for individuals, organizations and society,” says Birgitta Hedegård, CEO of Upgraded People AB.

About Upgraded People

Upgraded People is one of Northern Europe’s fastest growing companies in skills supply and strategic staffing. We offer tailor-made solutions that match the right skills with the right context – always with people at the center. Our clients are in both the public and private sectors, and we deliver resources in Sweden, Germany, Norway and Denmark. With over 1,200 consultants on assignment, we help organizations achieve their goals and visions in a sustainable way.

October is Cyber ​​Awareness Month – a time when cybersecurity is highlighted in everything from technology to culture. For us at Upgraded, it’s about something bigger than firewalls and encryption. It’s about people.

In our everyday lives, we meet developers, architects and technical leaders who shape digital solutions for Northern Europe’s largest companies and organizations, and time and time again we see the same thing: knowledge is one of the strongest lines of defense against cyber threats.

Security starts in the code

Cybersecurity isn’t just built by security departments – it starts in development. Every decision in the code, every dependency added, every API exposed to the outside world is a potential vulnerability.

When developers understand how small choices can have big security consequences, technical competence turns into awareness – and awareness into security.

In the training assignments we conduct, we clearly see how learning creates safety. When developers are given the opportunity to delve deeper, reflect, and understand “why,” not just “how,” both quality and cybersecurity are truly improved.

The people behind the systems

At Upgraded, we often talk about people as the real power behind successful tech organizations. The same goes for security. It’s not the systems that protect the business – it’s the people who build, manage, and evolve them.

Therefore, we see skills development as a strategic investment in cybersecurity. As our consultants and partners grow in knowledge, so does the resilience of the entire ecosystem.

A shared responsibility during Cyber ​​Awareness Month

This month, we want to encourage more organizations to consider skills development as part of their security strategy. Updating knowledge is just as important as updating systems.

At Upgraded, we continue to work to match companies with the right skills – not only to build competitiveness and innovation, but to build security.

Because ultimately, skill development is our common line of defense.

The consulting agency Upgraded People, one of the fastest growing companies in the Nordic region, has been awarded the prestigious DI Gasell award for the third year in a row. With this, the company also qualifies for the title of Master Gasell, an honorary title that is only given to companies that have managed to grow sustainably and successfully and achieved DI Gasell’s tough criteria for 3 years.

DI Gasell is awarded annually by Dagens Industri to the most successful companies in Sweden, where the criteria include strong growth, profitability and sound finances. Being appointed three years in a row is proof of both long-term thinking and the ability to deliver in a changing market.

– “We are incredibly proud to once again be appointed as a Gazelle company and now also be able to call ourselves a Master Gazelle. This is recognition for our entire team, our consultants and customers. We have continued to grow rapidly but with a focus on quality, relationships and sustainability,” says Birgitta Hedegård, CEO of Upgraded People.

The company was founded in 2010 and has quickly established itself as a leading player in consultancy brokerage, with operations throughout the Nordic region. The growth journey has been driven by a combination of entrepreneurship, deep market knowledge and a clear vision to create value for both clients and consultants.

– “Our ambition is not just to grow quickly, but to build a long-term business where people have the opportunity to develop. This award shows that we are on the right track,” continues Birgitta.

About Upgraded People

Upgraded People is one of Northern Europe’s fastest growing companies in skills supply and strategic staffing. We offer tailor-made solutions that match the right skills with the right context – always with people at the center. Our clients are in both the public and private sectors, and we deliver resources in Sweden, Germany, Norway and Denmark. With over 1,100 consultants on assignment, we help organizations achieve their goals and visions in a sustainable way.

Upgraded People AB, one of Northern Europe’s fastest growing consulting brokerage companies, has won the Ljungby Municipality’s procurement of consulting brokerage services. The framework agreement covers the period October 1, 2025 to September 30, 2026, with the possibility of extension for an additional twelve months.

The agreement covers the provision of qualified consultants within organization, investigation and management. The purpose is to support Ljungby Municipality’s various administrations and companies during temporary work peaks, needs for complementary skills or when a neutral external party is required. The assignments can be carried out both on site and remotely, depending on needs and agreement.

– “We are very proud to be trusted to collaborate with Ljungby Municipality. This agreement is further confirmation of our focus on quality, speed and transparency in the mediation process. We look forward to contributing the right expertise to strengthen the municipality’s development and operations,” says Alexander Malmström, Team Manager & Key Account Manager at Upgraded People AB.

Upgraded People has established itself as a leading player in consulting services in the Nordic region in recent years. The company has been named DI Gasell three years in a row and can now call itself Mästargasell, an award given to companies that demonstrate exceptional growth over time.

The new framework agreement with Ljungby Municipality further strengthens the company’s position as a reliable and long-term partner to the public sector.

About Upgraded People AB

Upgraded People is one of Northern Europe’s fastest growing consulting agencies, specializing in matching the right skills with the right assignments – quickly, accurately and transparently. The company collaborates with both private and public organizations across Northern Europe. With over 1,100 consultants on assignment, we help organizations achieve their goals and visions in a sustainable way.

User experience meets cybersecurity – when design becomes part of security

October is Cybersecurity Awareness Month, and at Upgraded People, we want to highlight an aspect that often gets overlooked: the connection between user experience (UX/UI) and cybersecurity. Because in today’s digital world, security is not just about technology – but also about how people experience and interact with it.

Design as a line of defense

A secure system is not enough if users do not understand it, or if security features are perceived as complicated. Then there is a risk that people will unknowingly bypass the protection.
Here UX becomes a decisive factor: The right design creates safety and prevents mistakes.

• Clear flows and alerts help the user make the right decisions.
• Understandable design makes security measures natural, not intrusive.
• A positive user experience strengthens both trust and security behavior.

When security feels simple and obvious, it becomes part of the experience – not an obstacle.

People at the center of cybersecurity

The human factor is often seen as a risk, but we see it as the key to success.
By combining security thinking and user-centered design, companies can create digital environments where people feel both safe and competent.

It’s about designing for trust, clarity, and control – three components that build strong relationships between users and digital systems.

When competence meets need

At Upgraded People, we see every day how the right skills make a difference.
We bring together specialists in UX, UI and cybersecurity – experts who help companies create digital experiences that are both user-friendly and secure.

Combining the user perspective with security thinking is not a contradiction – it is the future.

Are you looking for the right skills in UX or cybersecurity?

At Upgraded People, we match you with experienced consultants who can take your digital environment to the next level – safely, user-centric, and efficiently.