3.4 Information security and related expertise will be researched, measured, monitored and developed The costs of information security risk management for businesses will be researched and monitored in Finland. R&D investments related to improving the information security of the goods and services that businesses produce will also be studied. The possibilities for including data analysis and cryptology studies and research in the teaching programmes of different educational and research institutions and in other research programmes will be assessed. MEASURES:  A situation report will be made of the financial impacts of information security incidents and the costs of preventive measures taken against these – including financial loss and damage caused by data and communications offences.15  A survey will be made of Finnish information security projects that could receive funding from the European Commission as part of its cyber research programme to be set up in 2016.16  As part of the research and development activities supporting Government decisionmaking, means will be sought for improving the reliability of digital services and business models.17  The contribution of information security products and their development to net sales in the ICT sector will be monitored. Principal responsibility: Federation of Finnish Technology Industries, Finnish Information Security Cluster  The need for data protection and security experts experienced by companies in Finland will be researched. A study will be made of the means for improving the availability of experts. Sufficient resources for training and education in information security will be secured.18  A series of information security events (‘hackathons’) will be arranged, helping to identify national information security experts and to support networking among them.19 15 Responsibility: Ministry of Transport and Communications, Ministry of the Interior, Ministry of Finance Commission’s programme for improving the availability of European information security products through cooperation between the private and public sectors. Responsibility: Finnish Information Security Cluster, Federation of Finnish Technology Industries, Ministry of Transport and Communications, Ministry of Defence 17 On 3 December 2015 the Government approved an analysis, assessment and research plan to support Government decision making, including a project to investigate how the reliability of digital goods and services and business models can be improved. Responsibility: Prime Minister’s Office, Ministry of Finance 18 Responsibility: Ministry of Education and Culture, Ministry of Employment and the Economy, Finnish Funding Agency for Innovation (Tekes) 19 Responsibility: Finnish Communications Regulatory Authority, companies, Ministry of Employment and the Economy, Finnish Funding Agency for Innovation (Tekes) 16 10

Select target paragraph3