NCSA

The NCSA-FI is responsible for security matters related to the data transfer and handling of classified information in electronic communications. The services of NCSA-FI support organisations’ proactive security work and operational possibilities.

In Finland, the responsibility for our international information security obligations has been divided among several authorities. NCSA-FI is part of the Finnish security authority organisation. The overall responsibility for international information security obligations lies with the Ministry for Foreign Affairs. The Ministry acts as the National Security Authority (NSA) in Finland. It is responsible for:

steering national operations
taking responsibility for the preparation of international security agreements
steering and monitoring activities to ensure that international classified information is protected and handled appropriately.

The Ministry of Defence, the Finnish Security Intelligence Service and the Defence Command Finland are Designated Security Authorities (DSA). We acts as a Designated Security Authority and as a National Communications Security Authority (NCSA), specializing in information security matters concerning the handling of classified information in electronic communications.

Main responsibilities

NCSA-FI is the national Security Accreditation Authority (SAA). As the SAA, we are responsible for the assessment and accreditation of information systems used for processing classified information. Assessment and accreditation services are available for authorities and companies that process national or international classified information.

NCSA-FI is the national Crypto Approval Authority (CAA). As the CAA, we are responsible for the assessment and approval of cryptographic products used for protecting classified information. Assessment and approval services are available for authorities and companies.

We are the Crypto Distribution Authority (CDA) (or National Distribution Authority, NDA). We manage the distribution network of crypto material and provide guidance on the secure handling of the material.

We are also the National TEMPEST Authority (NTA). We coordinate national TEMPEST activities and give guidance on them.