FINLAND’S CYBER SECURITY STRATEGY 2019 STRATEGIC GUIDELINES 1. DEVELOPMENT OF INTERNATIONAL COOPERATION – protection of the cyber environment without borders Finland strives to secure its cyber environment while enjoying active support internationally and through EU cooperation. International cooperation is vital for Finland’s cyber security as it benefits Finland to closely cooperate with international actors multilaterally, regionally and bilaterally. This is true for cooperation and dialogue on both technical and political levels. International cooperation relies on the existing international law, international treaties and respect for human rights also in the cyber environment. Finland wants to maintain a universal, free and stable internet and to enable its safe use. Finland does not accept the aim of restricting the freedom and openness of the internet and, consequently, the fundamental rights and freedoms of individuals. In all cooperation on cyber security, Finland emphasises the rule of law, democracy and transparency. To solve international cyber security challenges, Finland plays an active role in the European Union and in key international organisations (UN, OECD, OSCE, Council of Europe, the framework of NATO partnership programmes). This is part of strengthening the international rules-based system, which is a key objective in Finland’s foreign policy. The decisions of the European Union and cooperation within the EU provide the backbone for Finland’s national cyber security policy and its development. Finland is actively involved in developing the EU’s Common Foreign and Security Policy on Cyber Security. In addition, the EU’s renewed cyber security strategy and key legislative projects, such as the EU Network and Information Security Directive (NIS), have a strong impact on the development of cyber security also at national level. The cyber environment is protected by increasing the threshold for different types of cyber attacks, for example by improving the observation and attribution capacity of cyber attacks and the ability to respond. Counter-measures may consist, for example, of law enforcement measures, diplomatic measures or active cyber counter-measures. The EU’s guidelines for the development of strong cyber defence are taken into account in the development of counter-measures. Within the framework of the EU, Finland contributes to the fight against cyber crime through international cooperation by justice and law enforcement authorities and by contributing to the development of international law and agreements. 5

Select target paragraph3