Publications of the Prime Minister’s Office 2024:13 of cybersecurity functions must also be appropriately promoted in regional administration, wellbeing services counties and municipalities for optimal use of resources. Centralised project funding from the General Government Fiscal Plan may be allocated to launch new cybersecurity operations, functions or services. The feasibility of providing a new official cybersecurity service to clients for a fee must always be examined when a public authority implements such a service. It is important to actively monitor and improve the productivity and impact of a cybersecurity operation, both at the level of society and in each organisation. Use of funding is planned, monitored and supervised through a common resourcing scenario as part of general government fiscal planning. The operating models required for formulating and maintaining this scenario must be implemented. Developing exercise activities Cyber exercises provide a foundation for strong cyber resilience in society as a whole. Cybersecurity exercise environments and operating models must be continually developed to respond to evolving operating environment. Organisations are encouraged to develop their own long-term exercise activities with the support of public authorities where required. The importance of arranging and increasing exercises that transcend sectoral boundaries is particularly acknowledged nationally. National cybersecurity exercises simulate various cyber incident scenarios, creating conditions in which the impacts of cyber incidents can be identified and recovery from them can be tested and practised. These exercises enhance competence and the ability and capacity of individuals and organisations to prepare for various cybersecurity incidents and threats. Active and regular exercises under normal conditions reinforce competence in all situations. International cyber exercises support preparations for and responses to crossborder cyber threats, and associated decision-making. It is important for Finland to participate in international cyber exercises, to contribute to them actively, and to develop and provide cyber exercise competence to partner countries. 30