Publications of the Prime Minister’s Office 2024:13 It should be noted that a substantial proportion of the infrastructure that is critical for the functioning of society is owned by the private sector. Besides the framework of regulation, agreements and services, cooperation between public authorities and the private sector in Finland is voluntary and relies on trust, tending to facilitate the flow of information on such aspects as various threats and incidents. Continually increasing and diversifying cybercrime can also be tackled through cooperation and adequate resourcing of public authorities. 3.7 Highlighting the security of service and supply chains The susceptibility of global supply chains to disruption has become part of our threat environment. An increasingly interdependent global economy also enables weaponisation of such elements as energy, raw materials, logistics and infrastructure for geopolitical purposes in cyberspace. Service and supply chains have become longer, more complex, and increasingly hard to manage. Supply chain attacks hack into the information systems of an organisation through the services that it purchases or through the hardware or software of its service providers. While it may be hard to endanger some service or system proper, or to secure unauthorised access to it, the disruptive aims of an attacker may be achieved equally well by influencing the associated supply chain. Actors that are critical for the functioning of society must therefore ensure the cybersecurity of their service providers and supply chains. 3.8 Cybersecurity enables business growth The digitalisation of society generates significant business opportunities that boost growth, ranging from streamlining processes to implementing new learning methods or other opportunities provided through R&D work. Emerging and disruptive technologies such as artificial intelligence and quantum computing enable the emergence of new kinds of solution to future challenges in cyberspace. Such technologies are nevertheless also available to and usable by hostile operators, posing problems for current protection methods. Evolving conditions have also increased the need for new and effective innovations that reinforce cybersecurity. 16