3.5
The authorities will help businesses and citizens to
improve their information security
The authorities will provide assistance and support for companies in integrating information
security in their business, for example by collecting and sharing information on the
management of information security risks. Companies will have good opportunities to
participate in the standardisation of goods, services and trust enhancing features, with the
support of the authorities and relevant organisations.
MEASURES:
The availability of commercial and public services for detecting hidden information
security risks, assessing the unwanted effects of these risks and reducing these risks
by sharing information will be examined.20
A situation report on information security will be maintained through confidential
information exchange between the Finnish Communications Regulatory Authority,
companies and other entities.21
A working group of authorities and businesses will be established to improve the
prevention and countering of offences targeting companies. The group will focus on
certain issues, including combating cybercrime.22
With suitable interpretation practices and transparent procedures and by offering
services, the authorities will, within the scope of their powers, support the creation of
new trust-enhancing business models based on data processing.23
A national network supporting the participation of Finnish companies in
standardisation work will be formed to promote the commercial availability, use and
export of information security services and goods that improve the confidentiality of
communications.24
A study will be made of whether there is demand for information security products
and services whose supply or use could be governed solely by Finnish or EU
legislation. An assessment will be made of how it would, if necessary, be possible to
keep these services in Finland, for example by means of State ownership.25
Business representatives and the principal authorities involved with this strategy will
come together as a network to monitor its implementation. The ministries will
incorporate the measures required in the strategy into their own operational and
financial plans. A summary of the implementation will be provided to the network.26
20
Responsibility: Ministry of Transport and Communications, Finnish Communications Regulatory Authority,
National Emergency Supply Agency, Ministry of Finance
21
Responsibility: Finnish Communications Regulatory Authority, companies, Ministry of Finance
22
Responsibility: Ministry of the Interior, companies
23
Responsibility: competent public authorities
24
Responsibility: Finnish Communications Regulatory Authority, Finnish Standards Association SFS
25
Responsibility: Prime Minister’s Office
26
Responsibility: Ministry of Transport and Communications and other ministries
11