Publications of the Prime Minister’s Office 2024:13 5.2 Pillar II: Preparedness Strong societal cyber resilience and operational reliability STRATEGIC OBJECTIVES OF THE AREA: • Vital functions of society, critical infrastructure, public services and actors that are critical for security of supply are cyber resilient. • Individuals, businesses, organisations and public authorities have jointly prepared for cyber incidents and threats. • Finland promotes its cybersecurity preparedness model as an export product. • • Cybercrime is prevented. • Environments and practices are developed for cybersecurity exercises, with more exercises conducted between various sectors. Preparedness is based on comprehensive shared situational awareness and long-term resourcing. We can trust the functioning of society Finland takes a proactive approach to cyber threats. People must have confidence that society will function under all circumstances. Adequate and timely preparation for cyber incidents is the cornerstone of operational reliability in a digital society. A proactive approach and long-term preparation promote the availability and incident resistance of societal services in all circumstances. Ensuring the functionality and incident resistance of vital functions is crucial. Vital functions include infrastructure that is critical for the cyber domain, data repositories, public services and security of supply. The goal of work done to ensure security of supply as part of preparedness is to protect the functioning of critical infrastructure, manufacturing and services, so that they can also satisfy the necessary basic needs of the population, the economy and national defence under all circumstances in the cyber domain. Public administration must consider the evolving operating environment when imposing preparedness requirements on businesses from the perspective of security, and when supporting the preparedness of businesses. Developing and extending cyber exercise operations is an important aspect of ensuring 27