Header

Committed to improving Finland's cyber resiliency

JYVSECTEC has been the dedicated provider for Finland's national cyber exercises (KYHA) since 2013.

Slide

Four annual national cyber exercises

Image of an outline of Finland with a closed lock next to it.

JYVSECTEC is committed to improve Finland’s national cyber resiliency. Four annual national cyber exercises (KYHA exercises) are aimed to municipality and critical infrastructure organizations, Finnish state administration organizations, security authorities and healthcare organizations. The Ministry of Transport and Communications enables the national cyber exercises, and Security Committee assists in coordination and implementation of exercises.

Prepare your organization

National cyber exercise improves organization’s resilience and train to handle even the largest scale cyber attacks.

Gain experience

Participants gain experience of realistic threat actors and attack techniques and test their competence on handling cyber incidents​.

Improve capabilities

Realistic organization environments ensure both technical and functional training for staff and organization and therefore improving capabilities.

Citation
Rauli Paananen

Reference

The KYHA exercises, organised four times a year, have significantly increased Finland's cyber capability.

Rauli Paananen
National Cyber Security Director, Ministry of Transport and Communications

Tero Kokkonen
FAQ

Frequently asked questions

How are participants in the KYHA exercise evaluated?

Participating organization and individuals are not scored or compared with each other. In the exercise, the organizations will operate in accordance with their own operating instructions and processes. This enables realistic training and makes it possible that observations and accumulated competence can be incorporated into the organization’s everyday life.

On what basis are exercise participants selected?

National cyber security exercises are commissioned by Finland’s cyber security director and each of the exercise participants are decided by a specific steering group.

What is the level of organizational maturity required to participate in the exercise?

Organizations, regardless of maturity level, should practice against identified cyber threats and risks. The common and organizational development and learning objectives of the exercise will be decided during the planning work.

How do KYHA exercises differ from process-based or desktop exercises?

KYHA exercises are technical-operational cyber exercises that enable both the technical competence and the collaborative development of the participants in a unique RGCE training environment. KYHA practices not only technical experts, but also e.g. organization’s management and communication specialists.

Slide

Improving national resilience

National cyber exercises are an advanced method to develop collaboration between different national authorities and governmental organizations.

Co-operation

During the national exercises, organizations develop and train co-operation on large-scale cyber incidents which have impacts for national security.

Networking

National cyber exercises help organizations to know their counterparties in different situations and enhance their communication between organizations.

Information sharing

Especially information sharing on cyber incidents helps other organizations to find and/or prevent cyber incidents happening in their environment.

Ministry of Transport and Communications logo
The Security Comittee logo
Slide

Key figures and highlights

4

national cyber exercises annually

3,7/4

the average rating given by KYHA participants for the exercise overall success during the years 2021-2024

I'm convinced there's no superior environment for practicing cybersecurity than RGCE.

-Rauli Paananen

Citation
Tero Kokkonen

Quote

The exercise objectives and their required scenarios are renewed annually, which is why we continuously develop the content and technical environment of the exercises.

Tero Kokkonen
Director, Jamk Institute of Information Technology

Tero Kokkonen
References

News and articles related to topic

Article

10.02.2025

Collaboration

Cyber range

2024: The Year of National Cyber Exercises

Article

23.01.2025

Cyber security

Red team

Understanding the role of red teams in cyber security exercises  

Any questions

Any questions left?

We're happy to help. Let's have a confidential discussion.

Leave a contact request!

Tero Kokkonen

Tero Kokkonen
Director, Jamk Institute of Information Technology


+358504385317
firstname.lastname@jamk.fi