version of an intersectoral virtual incident response team (VIRT). It will include a description of information flows and operating processes between the public administration and the business community during significant information security incidents and information security deviations involving the central government. A research project for developing the cyber situation picture and analysis capability will be implemented. As regards actors that do not have the obligation to notify of violations of information security pursuant to the directive on network and information security (NIS), the Ministry of Finance will ensure that ministries, administrative branches and service centres as well as counties and municipalities, and the businesses owned by them, will notify of any information security incidents and information security deviations involving the public administration to FICORA. The obligation to notify must be included in contracts signed with subcontractors. The Ministry of Finance will provide more detailed guidelines on the obligation. In addition, contractually based preparedness arrangements with the private sector will be implemented. 4) The public administration’s strategic information and cyber security guidelines will be confirmed Associated with strategic guidelines:1,3,9 Responsibility: Ministry of Finance The Ministry of Finance will appoint the Government Information Security Management Board (VAHTI) for the 2017–2019 period. VAHTI will handle and harmonise all essential strategic policy guidelines of information security for the public administration. Moreover, the Ministry of Finance will assess the need for and the possibilities of reviewing the present information security legislation. VAHTI will submit annual progress reports. 5) Finland will actively and effectively participate in international cyber security cooperation Associated with strategic guidelines:4,5,6 Responsibility: Ministry for Foreign Affairs and other ministries within their administrative branches Finland will actively influence the handling of international cyber security issues within the scope of the EU, the UN, the OSCE, NATO, the OECD, the Council of Europe and other key organisations, as well as bilaterally. The Ministry for Foreign Affairs has the key role in identifying foreign and security policy aspects in questions associated with the cyber domain. For its part, the Ministry for Foreign Affairs coordinates Finland’s positions in international forums on matters involving the cyber domain. The Ministry for Foreign Affairs will also help advance the international prospects of Finnish cyber security companies as part of export promotion and internationalisation. 12 The Security Committee