Publications of the Prime Minister’s Office 2024:13 The Safety Investigation Authority, Finland (SIAF) is empowered to conduct a safety investigation of any cybersecurity incident that causes fatalities or considerable financial or tangible damage. Safety investigations seek to prevent the recurrence of similar events, to learn from them, and to foster a proactive safety culture. Operative authorities Operative cybersecurity authorities play a key role nationally in both preparing for cybersecurity incidents and in responding to them and deploying countermeasures. There are also several voluntary national information exchange networks in Finland. The key function of the National Cyber Security Centre is to maintain national cybersecurity situational awareness and coordination with respect to national vulnerabilities. The Centre gathers and analyses data on information security threats and breaches, and assists in investigating technical information security incidents targeting Finland. It is also responsible for making the public more aware of cybersecurity. Its clients may apply situational awareness information when arranging and prioritising their own preparedness. The Centre also engages in extensive trust-based operational collaboration and information exchange with key national and international networks. It serves as the Finnish National Coordination Centre (NCC-FI) for the European Cybersecurity Industrial, Technology and Research Competence Centre. The criminal investigation authorities seek to prevent crime and to investigate the parties involved and the details of offences for the purpose of criminal processes. These processes include the work of the police, public prosecutor and courts. The police investigate information network offences, seeking to apply information received to prevent potential future offences. The police maintain national situational awareness concerning information network offences. Active involvement by the National Bureau of Investigation focuses particularly on preventative operations that seek to enhance public awareness. The intelligence authorities include the Finnish Security and Intelligence Service and the military intelligence authorities (Defence Command Finland and the Finnish Defence Intelligence Agency). These authorities are responsible for collecting, analysing and reporting information to support the work of the security authorities and the government. Intelligence is an asset in anticipating cyber threats that target Finland, and helps the competent authorities to combat these threats. The purposes of intelligence collection by the intelligence authorities include identifying the perpetrators of online cyberattacks and determining their backgrounds and motives in order to protect national security, supporting 56