3.5 The authorities will help businesses and citizens to improve their information security The authorities will provide assistance and support for companies in integrating information security in their business, for example by collecting and sharing information on the management of information security risks. Companies will have good opportunities to participate in the standardisation of goods, services and trust enhancing features, with the support of the authorities and relevant organisations. MEASURES:  The availability of commercial and public services for detecting hidden information security risks, assessing the unwanted effects of these risks and reducing these risks by sharing information will be examined.20  A situation report on information security will be maintained through confidential information exchange between the Finnish Communications Regulatory Authority, companies and other entities.21  A working group of authorities and businesses will be established to improve the prevention and countering of offences targeting companies. The group will focus on certain issues, including combating cybercrime.22  With suitable interpretation practices and transparent procedures and by offering services, the authorities will, within the scope of their powers, support the creation of new trust-enhancing business models based on data processing.23  A national network supporting the participation of Finnish companies in standardisation work will be formed to promote the commercial availability, use and export of information security services and goods that improve the confidentiality of communications.24  A study will be made of whether there is demand for information security products and services whose supply or use could be governed solely by Finnish or EU legislation. An assessment will be made of how it would, if necessary, be possible to keep these services in Finland, for example by means of State ownership.25  Business representatives and the principal authorities involved with this strategy will come together as a network to monitor its implementation. The ministries will incorporate the measures required in the strategy into their own operational and financial plans. A summary of the implementation will be provided to the network.26 20 Responsibility: Ministry of Transport and Communications, Finnish Communications Regulatory Authority, National Emergency Supply Agency, Ministry of Finance 21 Responsibility: Finnish Communications Regulatory Authority, companies, Ministry of Finance 22 Responsibility: Ministry of the Interior, companies 23 Responsibility: competent public authorities 24 Responsibility: Finnish Communications Regulatory Authority, Finnish Standards Association SFS 25 Responsibility: Prime Minister’s Office 26 Responsibility: Ministry of Transport and Communications and other ministries 11

Select target paragraph3