Publications of the Prime Minister’s Office 2024:13 of information to identify and share it on their own initiative. It must be possible to share information on serious cyber threats more effectively with businesses critical for security of supply, municipalities, the service providers that they own, and wellbeing services counties within the constraints of restrictions on sharing. Better methods and conditions for collecting, analysing and sharing information on the level of cybersecurity and cyber resilience are needed with respect to public services. Sharing highly classified information requires the development and deployment of suitable systems. The 2023 report on the authorities’ capacity to act in cyber security matters should be considered when developing information exchange between public authorities. Smooth cooperation between public authorities Implementation and responsibilities in operational cooperation, and preparedness for and responses to serious cyber threats and incidents, will be coordinated in a closer and more inclusive agency-level cooperation structure comprising the Finnish Transport and Communications Agency Traficom, the National Bureau of Investigation, the Defence Forces and the Finnish Security and Intelligence Service. Coordination will be based on shared situational awareness. The cooperation structure and associated public authorities must be adequately authorised to disclose and receive information. The cooperation structure will also bring a need for closer tactical and technical collaboration between public authorities. The operating culture of cybersecurity should be reformed in line with the model of comprehensive security by boosting international and national cybersecurity cooperation between central and regional administration, wellbeing services counties, municipalities, local administration and organisations. Use of the operating models of international partners and of technologies that provide cybersecurity solutions would be enlarged to achieve this. It is important for wellbeing services counties, as new actors, to promote a cybersecurity culture and cybersecurity competence in partnership with other actors. Centralised cybersecurity services Centralised cybersecurity services are currently provided by the Finnish Transport and Communications Agency Traficom, the Digital and Population Data Services Agency, other central government parties, and businesses owned by wellbeing services counties and municipalities, working together with the private sector. Such services include the HAVARO serious information security threat detection 35