Publications of the Prime Minister’s Office 2024:13 More resources must be allocated to implementing all strategic objectives and development measures. A change in the cyber profile of Finland will not only require increased resources, but also more focused planning and monitoring and more efficient use of resources. Building a functioning and vital cybersecurity ecosystem means making considerable financial investments at the level of society as a whole. A functioning ecosystem generates vitality and growth, increases jobs in the sector, fosters the required competence, and improves the resilience and resistance of a digital society against harmful phenomena in the cyber domain. More extensive and profound application of the model of comprehensive security in ensuring cybersecurity, and the associated preparedness, responses and countermeasures, are necessary measures that help to avoid the costs of serious cyber incidents. The model of comprehensive security applies existing resources more efficiently and increases general resilience, as competence, operating models and best practices can be shared between organisations at varying levels of preparedness. High-standard R&D in emerging and disruptive technologies and investments in national cybersecurity are key instruments for preserving a society that is cyber safe and resistant to cybersecurity crises. Supporting RDI is also important for increasing national competitiveness. Competence is required at all levels, with resources required in such areas as the education and advice provided by organisations to a substantial segment of the public, and the cyber exercises arranged by various actors. Use of NATO innovation funding and EU development funding are essential aspects of developing the Finnish cyber ecosystem. This will require co-financing by Finland and resource coordination between administrative branches. NATO membership also requires additional investment in cybersecurity and cyber defence, and in developing infrastructural cyber resilience. It will call for new kinds of capability and resourcing from Finland in support of allies. One key aspect of determining national resources is estimating the alternative costs, or the costs that could be incurred if strategic development measures prove ineffective. Besides the staffing and ICT costs arising from cyberattacks, these expenses include the consequences of data leaks, cybercrime or reputational damage. 42