Finnish Cyber Security Strategy and its implementation 14 th October 2014, Београд Secretary General, Information Security Adviser Aku Hilve

pp.kk.vvvv Osasto Finland 2 The role of Ministry of Finance  Overall responsibility for the development of public administration information management  Overall responsibility for steering and developing Government information security in Finland Public Sector ICT

pp.kk.vvvv Osasto Finland 3 The role of Ministry of Finance Legislation, regulation, policies  Acts: Openness Act, ICT management Act, Preparedness Act, Infosec. auditing and accreditation Act  Decree on Information Security in Central Government (based on Openness Act)  Government resolution on enhancing information security in Central Government (2009)  Government resolution on Security Strategy for Society (2010), Cyber security strategy (2013) Public Sector ICT

pp.kk.vvvv Osasto Finland 4 Government resolution on enhancing information security in Central Government Main focus areas of development  Leadership  Including information security objectives to management by results  Managing, reporting and auditing information security  Resources for information security and ICT continuity  Measuring  Holistic approach  Preparedness  Protecting information and it’s value Public Sector ICT

pp.kk.vvvv Osasto Finland 5 Public sector ICT  The unit is responsible for the overall development of public administration information management, e- Government and corporate data, for information management governance in central government and for the coordination of joint development projects.  Public sector ICT promotes information management cooperation between central and local government, formulates joint functional and technical solutions and methods and is in charge of overall development of information security in public administration as well as data security governance in central government. Public Sector ICT

pp.kk.vvvv Osasto Finland Government Information and Cyber Security Management Board - VAHTI  The Ministry of Finance has set up the Government Information and Cyber Security Management Board VAHTI to deal with topics of co-operation, steering and development of information security and cyber security in central government.  The VAHTI Board acts as a body for co-operation, preparation and coordination among government organizations in charge of developing and steering information security and data protection. 6 Public Sector ICT

pp.kk.vvvv Osasto Finland 7 Government Information and Cyber Security Management Board - VAHTI  The VAHTI Board issues information security statutes, instructions, recommendations, formulates objectives and other information security policy papers and directs information security measures in central government.  It also encourages the further development of networking arrangements in public sector information security work. Public Sector ICT

pp.kk.vvvv Osasto Finland Steering Public Sector ICT Shared services Government service providers/ producers Cooperation Government Information and Cyber Security Management Board (VAHTI) Clients, Users Ministries, Authorities, Administration Networking model for co-operation 8 Public Sector ICT Public sector ICT unit is responsible for the overall development of public administration information management, e- Government and corporate data, for information management governance in central government and for the coordination of joint development projects. The VAHTI Board acts as an body for cooperation, preparation and coordination among government organizations in charge of developing and steering information security and data protection.

pp.kk.vvvv Osasto Finland More information  The Government Information and Cyber Security Management Board  VAHTI publications 9 Public Sector ICT