Publications of the Prime Minister’s Office 2024:13 Appendices Appendix 1: National cooperation model for cybersecurity This appendix describes the current state and actors of the national cooperation model for cybersecurity, and provides a national perspective on the requirements of the cybersecurity directive (NIS2). The Finnish national cooperation model for cybersecurity (hereinafter referred to as the cybersecurity cooperation model) is decentralised. It corresponds in principle to the cooperation model for comprehensive security (hereinafter referred to as the model for comprehensive security). Cooperation is based on statutory duties, cooperation agreements, and the Security Strategy for Society, which accommodates cybersecurity in each strategic task. The cybersecurity cooperation model is scalable to all levels of society, meaning that it can be applied from the national level to regional and local levels, or to wellbeing services, counties and municipalities, while taking international partners into consideration. The model of comprehensive security guarantees the vital functions of society through cooperation between the public sector, business community, civil society and citizens under all circumstances and at all levels. Ongoing development of the cybersecurity cooperation model will conform to the model of comprehensive security while accommodating the special characteristics of cybersecurity. The competent authorities will direct incident management in accordance with their respective duties and powers under the cybersecurity cooperation model, and in a cyber crisis referred to in the cybersecurity directive. The societal crisis management model will determine these authorities, and the harmonisation of, and support for operations where necessary. Each operator will be responsible for its own preparedness, and as required under the Emergency Powers Act and sectoral legislation to ensure that critical services function under all circumstances, for example by imposing requirements on service providers and by supervising their implementation. The public sector, business community and civil society will collaborate closely in preparing for, and responding to cyber incidents. The centralised cybersecurity services that are jointly provided by the public sector and businesses will support organisations and citizens in preparedness and incidents. This will harmonise operations, help prevent cost duplication, and ensure that generally required services, such as online exercises, cybersecurity 52