JYVSECTEC has been the dedicated provider for Finland's national cyber exercises (KYHA) since 2013.
Slide
Four annual national cyber exercises
JYVSECTEC is committed to improve Finland’s national cyber resiliency. Four annual national cyber exercises (KYHA exercises) are aimed to municipality and critical infrastructure organizations, Finnish state administration organizations, security authorities and healthcare organizations. The Ministry of Transport and Communications enables the national cyber exercises, and Security Committee assists in coordination and implementation of exercises.
Prepare your organization
National cyber exercise improves organization’s resilience and train to handle even the largest scale cyber attacks.
Gain experience
Participants gain experience of realistic threat actors and attack techniques and test their competence on handling cyber incidents.
Improve capabilities
Realistic organization environments ensure both technical and functional training for staff and organization and therefore improving capabilities.
Citation
Reference
The KYHA exercises, organised four times a year, have significantly increased Finland's cyber capability.
Rauli Paananen
National Cyber Security Director, Ministry of Transport and Communications
FAQ
Frequently asked questions
How are participants in the KYHA exercise evaluated?
Participating organization and individuals are not scored or compared with each other. In the exercise, the organizations will operate in accordance with their own operating instructions and processes. This enables realistic training and makes it possible that observations and accumulated competence can be incorporated into the organization’s everyday life.
On what basis are exercise participants selected?
National cyber security exercises are commissioned by Finland’s cyber security director and each of the exercise participants are decided by a specific steering group.
What is the level of organizational maturity required to participate in the exercise?
Organizations, regardless of maturity level, should practice against identified cyber threats and risks. The common and organizational development and learning objectives of the exercise will be decided during the planning work.
How do KYHA exercises differ from process-based or desktop exercises?
KYHA exercises are technical-operational cyber exercises that enable both the technical competence and the collaborative development of the participants in a unique RGCE training environment. KYHA practices not only technical experts, but also e.g. organization’s management and communication specialists.
Slide
Improving national resilience
National cyber exercises are an advanced method to develop collaboration between different national authorities and governmental organizations.
Co-operation
During the national exercises, organizations develop and train co-operation on large-scale cyber incidents which have impacts for national security.
Networking
National cyber exercises help organizations to know their counterparties in different situations and enhance their communication between organizations.
Information sharing
Especially information sharing on cyber incidents helps other organizations to find and/or prevent cyber incidents happening in their environment.
Slide
Key figures and highlights
4
national cyber exercises annually
3,7/4
the average rating given by KYHA participants for the exercise overall success during the years 2021-2024
I'm convinced there's no superior environment for practicing cybersecurity than RGCE.
-Rauli Paananen
Citation
Quote
The exercise objectives and their required scenarios are renewed annually, which is why we continuously develop the content and technical environment of the exercises.
Tero Kokkonen
Director, Jamk Institute of Information Technology
References
News and articles related to topic
Article
10.02.2025
Collaboration
Cyber range
2024: The Year of National Cyber Exercises
Article
23.01.2025
Cyber security
Red team
Understanding the role of red teams in cyber security exercises
Any questions
Any questions left?
We're happy to help. Let's have a confidential discussion.
Tero Kokkonen
Director, Jamk Institute of Information Technology
+358504385317
firstname.lastname@jamk.fi
Slide
Adding resilience to digital business
Slide
JYVSECTEC – Jyväskylä Security Technology is an independent research, development, and training center in Finland. We operate as part of Jamk University of Applied Science's Institute of Information Technology.