TIETO26 exercise strengthens companies’ and public authorities’ preparedness through cooperation

The National Cyber Security Centre Finland (NCSC-FI) at Traficom is participating in the TIETO26 exercise as a long-standing partner. In the exercise, companies and public authorities practise cooperation and information exchange in preparation for large-scale hybrid, cyber and information incidents. 

“Cyber incidents can affect several organisations and essential functions of society at the same time. This is why, in addition to preparing within our own organisations, we need effective cooperation and regular exercises. Organisations can also apply the operating practices learned in exercises to their day-to-day activities,” says Anssi Kärkkäinen Director-General of the NCSC-FI. 

Companies’ cybersecurity helps ensure society can function reliably

Companies play a key role in the functioning of Finnish society and in security of supply. For example, they provide services that are important to society in areas such as transport, water supply, communications networks and digital services.

Society’s dependence on communications networks and information systems means that even critical services considered traditional depend on the security and operational reliability of the digital environment. A large-scale cyber incident can therefore affect several sectors at the same time.

The cybersecurity of companies’ own systems, services and operations is an important part of society’s preparedness. Reports of cyber threats submitted by companies to the NCSC-FI also contribute to national situational awareness of cybersecurity.

Public and private sectors practise working together during incidents

Finland has a long tradition of cooperation between companies and public authorities. Cooperation is particularly important in cybersecurity because incidents can quickly cross organisational and sectoral boundaries.

Up-to-date plans form the basis of preparedness, but exercises show whether they work in practice. Exercises allow organisations to test their operating models and cooperation and identify situations where responsibilities, information flows or practices need to be clarified.

After an exercise, organisations can put the identified areas for development into practice. This strengthens their ability to maintain essential functions and manage cyber incidents.

NCSC-FI maintains situational awareness and provides support during incidents

The NCSC-FI at Traficom develops and monitors the operational reliability and security of communications networks and services and maintains national situational awareness of cybersecurity.

The NCSC-FI receives information about detected incidents, analyses it and shares up-to-date information on cyber threats. Observations reported by organisations and other information available to the NCSC-FI contribute to the shared situational picture and can help other actors prepare for identified threats.

During large-scale cyber incidents, the NCSC-FI supports organisations with technical investigations. National services and cooperation support organisations’ preparedness, but each organisation is responsible for the cybersecurity of its own operations.

NCSC-FI provides services and operates in all circumstances, including emergency conditions

In emergency conditions, the role of security authorities becomes more prominent. The NCSC-FI’s CSIRT activities are based on continuous assessment and prioritisation of threats and incidents. During emergency conditions, it is also be essential to assess the situation daily to determine what requires the most urgent attention at any given time. Cooperation and information exchange between actors already rely on strong trust and active interaction. We continuously develop our preparedness so that we can handle significantly higher numbers of reports and cases during emergency conditions.