6) Finland’s cyber security forum will provide a collaborative platform for the public administration, the business community and the academia Associated with strategic guidelines:1,2,6,9,10 Responsibility: Secretariat of the Security Committee Finland’s cyber security forum strives to improve cooperation and exchange of information among the scientific and research community, the public administration, businesses and NGOs. The forum monitors the progress of the Cyber Security Strategy and this Implementation Programme and evaluates their up-to-datedness. In addition to the members of the Security Committee, the forum will invite professors of cyber security as well as CEOs and presidents of NGOs to its events. The forum will receive reports on the progress of the Implementation Programme, Finland’s cyber security situation and the results of research projects. 7) Instruments for monitoring the progress of the Implementation Programme will be established Associated with strategic guidelines:9,10 Responsibility: Secretariat of the Security Committee and the Ministry of Finance The implementation of cyber security is being monitored through presently existing instruments. The Secretariat of the Security Committee and the Ministry of Finance will carry out a research project to create an updated maturity model and instrumentation for the purpose of monitoring the status of Finland’s cyber security and the achievement of the goals of this Implementation Programme. The maturity model and the instruments will be used to provide regular reports on the status of the Programme to the Security Committee, the Government, the cyber security forum and other stakeholders. The Implementation Programme will be evaluated annually and in that context measures can be changed, added or removed. 8) The preconditions for influencing the cyber domain will be secured Associated with strategic guideline:5 Responsibility: Ministry of Defence, Ministry of the Interior In accordance with the Cyber Security Strategy the Defence Forces will develop and maintain a comprehensive cyber defence capability for their statutory tasks. This also includes a cyber-attack capability. The Ministry of Defence, together with other relevant stakeholders, will determine the process associated with the cyber-attack capability. Among other things, the process entails powers, practices associated with executive assistance, methods for cooperating across administrative branches, the exchange of information among different authorities, lines of authority and legal mandates. Implementation Programme for Finland’s Cyber Security Strategy for 2017–2020 13