Publications of the Prime Minister’s Office 2024:13 The basis for determining performance indicators for cybersecurity will include cyber surveys conducted by the EU cybersecurity agency ENISA, the OECD and NATO, the annual digital security survey of the Digital and Population Data Services Agency (public administration), the cyber maturity survey of sectors conducted by the National Emergency Supply Agency (business community), and the digital security barometer formulated by the Digital and Population Data Services Agency (cyber resilience of citizens), as appropriate. The goal is to expand cyber resilience indicators to include preventative cyber preparedness efforts. Finland will seek assistance from ENISA where necessary when determining key performance indicators, as provided in the NIS2 directive. The international success of Finland will be monitored by reference to international indices (ITU: Global Cybersecurity Index [GCI] and e-Governance Academy: National Cybersecurity Index [NCSI]). Implementation of the strategy will stress the identification of best practices, with extensive application of practices based on lessons learned from incidents. This will promote the establishment and maintenance of consistent practices and support the resilience of society as a whole. The purpose of assessing the implementation is to support political decision-making, the operations of public authorities, and public debate. 44