II Society’s vital digitalised functions will be safeguarded Finland’s cyber security report 2017 states that ‘The Finnish networked information society must better identify targets that affect vital functions and critical infrastructure and, in particular, identify the critical services and functions that are indispensable to them and the stakeholders that rely on these critical services and functions. The identification of critical stakeholders and functions in the cyber domain also entails the consideration of “cyber self-sufficiency”, i.e. securing a sufficient autonomous capability for maintaining the critical infrastructures. Legislative review is an important subtopic in developing and strengthening state cyber security.’ 12) The digital services of the public sector and the needed infrastructure, indispensable for the vital functions of society, will be identified and under control Associated with strategic guidelines: 3,4,5,6,9 Responsibility: Ministry of Finance, Government ICT Centre Valtori, other service centres and businesses providing services to the public administration The Ministry of Finance will determine the need for legislative amendments on the central government’s shared new digital services and associated technologies. The Ministry of Finance will guide the Government ICT Centre Valtori to implement a control system containing descriptions of the digital services and the interdependencies which are inevitably needed for the vital functions of society. These digital services are included in the national critical infrastructure. The relevant partners in the value chains linking the public administration and the business community will be identified and the security of functional processes will be guaranteed. Critical services and interfaces that the services rely on will be identified. A research project on describing the critical infrastructure and cyber self-sufficiency as an element of national cyber resilience necessary for society’s vital pubic services will be carried out. 13) The continuity of functional processes as well as information and cyber security will be assured in the health, social services and regional government reform Associated with strategic guidelines: 3,9 Responsibility: Ministry of Social Affairs and Health, Ministry of Finance, Ministry of Interior, other ministries, counties As a result of the health, social services and regional government reform, counties and service utilities owned by them as well as the companies that provide services, communities, foundations and municipal services form an ecosystem. Its continued functioning, information and cyber security included, is essential to the counties’ customers/citizens. Implementation Programme for Finland’s Cyber Security Strategy for 2017–2020 15