Publications of the Prime Minister’s Office 2024:13
government decision-making (including in respect of the attribution process), and
discharging other statutory duties of authorities working in the field of national
security.
The duties of the Defence Forces may also be considered to cover the cyber domain
(cyber defence and intelligence in the cyber domain). These duties accordingly
include military defence, supporting other authorities and providing international
assistance, engaging in cooperation, and conducting other international
operations. The Defence Forces protect the territory of Finland, the living conditions
of its population, the freedom of action of top-level government and the lawful
order of society, applying military force as necessary whenever Finland is subject to
any threat of armed attack or any similar external threat.
Central, regional and local administration and independent bodies
Central, regional and local administration, wellbeing services counties,
municipalities and independent bodies play a key role in ensuring cybersecurity in
the daily work of authorities. Actors include government agencies, publicly owned
undertakings and businesses, regional administration actors, wellbeing services
counties, municipalities and joint municipal authorities, businesses and public
service providers owned by wellbeing services counties and municipalities, and
independent bodies. Some of these are required to direct, supervise, instruct, assist,
coordinate, support and alert, and also to gather, analyse and share information on
cybersecurity to support decision-making and operational development. They also
provide public services in cooperation with the business community, and ensure
the security, risk and continuity management and preparedness of services.
Businesses and organisations
The operations, competence and resources of the private sector form a significant
element in Finland’s national cybersecurity, with the business community owning
most of the country’s critical infrastructure. Safeguarding critical infrastructure
and security of supply as part of the vital functions of society is crucial for societal
functionality and continuity management. Besides their technological capacity,
businesses have a strong competence base and the commitment and resources
to prepare for cybersecurity threats to their operations, both in Finland and in
international markets.
The preparedness of the business community is partly based on legislation, but also
on voluntary preparedness and work to ensure security of supply. The public and
private sectors collaborate on a daily basis to maintain awareness of conditions,
57