Publications of the Prime Minister’s Office 2024:13 EU regulation on cybersecurity has progressed rapidly in recent years, strengthening the cybersecurity of Finland and other EU countries. National implementation of this regulatory framework and operational adaptation by organisations will accordingly challenge both public authorities and businesses in coming years. Competence and training needs, and the costs of establishing adequate safeguards will increase, with additional measures required to manage cyber risks. Regulation will establish conditions for improving the cybersecurity of critical societal actors and the integrated security of devices and software. Public authorities will also enhance their work in preparedness and incident management, and in responses and countermeasures. Alongside EU and NATO membership, other bilateral or multilateral international cooperation in cybersecurity and cyber defence has expanded and deepened. The initiatives and cooperation of like-minded countries will help in responding to key cyber threats and improving collective cybersecurity. The UN and various regional organisations recognise the importance of cybersecurity to international security. 3.5 Developing a national cooperation model The national cooperation model for cybersecurity is based on the ability to continually enhance the operation of information systems and organisations, so that they can withstand and recover from cyberattacks and technical incidents. The evolving operating environment and cyber threats are a challenge to previous ways of operating, with a greater need to improve preparedness measures and responses, and to take increasingly proactive coordinated countermeasures. The model of comprehensive security also enables the cybersecurity sector to prepare and develop cooperation in accordance with the Security Strategy for Society. 3.6 Increased cybercrime affects society as a whole Serious cybercrime can disrupt the vital functions of society, threaten national security, or otherwise cause incidents that have a broad impact on society. Growing cybercrime and a rapid escalation of threats affect society as a whole. Cybercrime can jeopardise fundamental rights, erode trust in services, and cause considerable financial losses. It is increasingly linked to organised crime and statesponsored operators. States often outsource hostile operations to various types of intermediary, such as criminal groups. By purchasing services from criminals, hostile states may seek such goals as hampering attribution or varying the intensity of their cyber operations. 15