Publications of the Prime Minister’s Office 2024:13 and through active information exchange and long-term development work. The business community is closely involved in various cooperation groups, increasing trust between the public and private sectors and providing an opportunity for impactful cooperation internationally as well. Businesses generate most of the information and cybersecurity services in society. Private ICT service providers play a key role in the cybersecurity of citizens and businesses, and of national and regional government. National Emergency Supply Organisation The National Emergency Supply Organisation is a network that includes the National Emergency Supply Agency and its Board, the National Emergency Supply Council, and sectors and pools in various industries. The organisation also works with regional actors, including Regional State Administrative Agencies, municipalities and cities, and several regional commissions. The National Emergency Supply Organisation cooperates with the public sector, several hundred businesses, organisations and third sector actors to maintain and develop national security of supply. The objective is to ensure the operating conditions of organisations that are critical for security of supply, and thereby those of society as a whole under all circumstances. Supervised entities (NIS2) Risk management and incident reporting obligations under the NIS2 directive are applied to the essential and important entities specified in the directive, which operate in sectors that are critical for the functioning of society and whose size must usually exceed certain threshold values. These parties are here referred to as supervised entities. Annexes I and II to the NIS2 directive list the types of entities that fall within the scope of the directive, which covers the following sectors: energy, transport, banking, financial market infrastructures, social affairs and health drinking water, wastewater, digital infrastructure, ICT service management, public administration, and space (Annex I), as well as postal and courier services, waste management, manufacture, production and distribution of chemicals, production, processing and distribution of food, manufacturing, digital providers and research (Annex II). 58