Publications of the Prime Minister’s Office 2024:13 The operating conditions for judicial and law enforcement authorities, for national and cross-border cooperation, and for the required information exchange will be enhanced in response to an evolving security environment. Cross-border combatting of cybercrime relies on common international investigation groups. The information gathered through crime prevention and its methodological range should also be applied more effectively in support of cyber defence, attribution and countermeasures. Developing national attribution operations Finland develops national guidelines and a process for goal-oriented and consistent cyber attribution that accommodates the needs of key allies and partners. Attribution means collecting and analysing facts, conducting a technical, judicial and political assessment, making decisions and, ultimately, communicating such decisions to various parties. A comprehensive attribution process must be capable of using all information related to attribution that is procured by intelligence, cybersecurity, investigative and other public authorities in the course of their statutory duties. The ability of Finland to combat state-sponsored cybersecurity operations targeting Finland or her interests will be secured by ensuring that the intelligence and security authorities have fully updated powers and conditions for discharging their functions. Specifying the functions and role of cyber defence A cyber defence doctrine specifying the aims of cyber defence is drawn up to support cyber defence implementation. The doctrine describes how cyber defence is effected by applying national capabilities and those of the alliance and partners. Cyber defence is developed in a balanced manner in parallel with the development of national cyber resilience, cybersecurity and cybercrime prevention. The role of national and military cyber defence in peacetime, crises and conflict is specified to the level required by the security environment. National cyber defence is developed as part of the development and implementation of comprehensive national defence. Finland reviews its position and approach to hostile operations occurring in the cyber domain, preparing nationally for active cyber defence and the possibility of attribution to an opponent and countermeasures. Cyber defence operations are harmonised with foreign and security policy operations and actors. 39