Finland should be prepared for various cyber attacks targeting critical infrastructure.
After Russia’s attack on Ukraine, alarm bells have started ringing in Finland for citizens and companies as well. Many people think about what is happening in the world at the moment and how the security situation in Europe affects us. In addition to this, the eye is also on the future, and many are thinking about what the situation will be six months or a year from now.
Cyber expert in the Digital Security Week program of the Digital and Population Information Agency Catharina Candolin OP Financial Group gave a speech on what to prepare for in Finland “amidst the fog of war”.
Candolin said cyber threats and cyber attacks are part of modern warfare. According to him, this is the first time that the cyber dimension is part of warfare on this scale.
Although a significant cyber attack is currently not likely, according to Candolin, one should be prepared for such. Adobe Stock / AOP / Screenshot
The cyber dimension is really important to keep in mind when talking about critical infrastructure, which is extremely important for the functioning of society. This includes, among other things, electricity production and distribution, data traffic, payment traffic, water and food supply, official functions and healthcare.
– These infrastructures depend on the fact that data communication and digital services work and are secure. In addition, the infrastructures are interdependent, Candolin said.
– It is worth keeping in mind hostile activities, thinking that critical infrastructure is the first target. We have also seen this in Ukraine, Candolin stated, referring to the cyber attacks on weapons control systems, energy and the financial world that took place in Ukraine.
However, according to Candolin, the situation in Finland is good in these respects.
The threat level has increased
Candolin refers to the Cybersecurity Center’s assessment that the threat level of cyber security has increased in Finland. Cyber-attacks have also increased globally and they are even more customized and deliberately targeted at certain organizations and critical infrastructure.
However, Candolin stated that, according to the evaluations of the protection police, the planning and implementation of a cyber operation that paralyzes the functioning of society is not easy, which is why operations of this type are not likely.
As far as cyber espionage is concerned, however, the situation is different, and Russia will very likely aim to direct illegal intelligence into the cyber environment during the winter. In the background, Finland’s NATO process has a lot of influence, which Russia can try to influence with hybrid means. However, in an uncertain situation, one can only guess what is possible to come.
– We know what is being said about the situation, but there is no complete information, only estimates of what is likely. This is the best information, based on which we have made the best possible assessment of the situation, Candolin said.
Regarding the future, Candolin said that Finland can assume that Russia has its hands full in Ukraine.
– The situation in Finland will therefore be relatively calm. However, we do not know whether Russia has gained a foothold in Finland’s critical infrastructure. We don’t know what Russia will do next. We don’t know to what extent we can rely on the information we have. However, we should decide what to do next, Candolin said.
These are the things Candolin alluded to when he spoke of the fog of war.
– We have to accept that we don’t have all the information. Still, you have to be able to make decisions and live with the situation. What we can do later is learn from it. This will not be the last war or crisis to be prepared for.
In his speech, Candolin highlighted the importance of preparation. Finland’s international networks must be in order and Finland must be prepared for the possibility of attacks. In this case, it is important to understand what it means.
Citizens and companies should also be prepared. Whereas companies need answers, a situational picture and advance warnings, citizens have already started preparing. Candolin refers to the “iodine tablet geddon”, by which he means the rush of Finns to pharmacies for iodine tablets.
– Communication could be considered more moderate in such cases. However, this is a good example of citizens wanting information and being prepared.
– For citizens, the best preparation is a 72-hour home reserve. If there are disruptions to the critical infrastructure, you can manage at home for the time being. Cyber hygiene and media literacy must also be maintained.
What counts as an attack?
According to Candolin, Finland should be prepared for the possibility of a significant cyber attack, even though it is not likely at the moment. In such a situation, one should also think about what can be equated with an armed attack.
– If the missile hit the neck, we would understand that it was an armed attack. If a cyber attack is carried out on another state, which has similar effects, it can be compared to an armed attack. If such an interpretation were made, what would happen?
Candolin states that in such a situation the aggressor should be pointed out. The target of the attack should have the technical ability and the political will to react to the attack, in which case the responsibilities should also be clear. In addition, legislation should be up-to-date and countermeasures thought out.