Information security notices

CERT-FI warns about information security threats

CERT-FI is a national information security authority within FICORA. It observes, prevents and solves information security incidents and releases information on information security threats. The website maintained by CERT-FI is the principle distribution channel for alerts and guidelines.

CERT-FI maintains situation awareness of information security in Finland and, based on the information CERT-FI has gathered, estimates the threats posed to Finland and the Finns. This information is distributed publicly or as tailor-made notices and alerts.

The operational informative material of CERT-FI is divided into three sub-categories.

CERT-FI's alerts

The CERT-FI alert category issues an alert when the changed situation requires concrete measures in order to protect telecommunications and communications systems against threats posed to information security.

Alerts can be issued on events and phenomena threatening information security that affect

• companies and organisations;
• citizens;
• large groups of IT users.

Information security Now!

Information security Now! - a network blog that discusses topical information security issues, such as

• the most recent vulnerabilities and gives background information on them;
• phenomena discovered in communications networks.
  

Vulnerabilites

In the vulnerabilities category, CERT-FI publishes notices of severe programming errors that may affect

• the integrity or availability of IT systems;
• the confidentiality of the information in the system.
  

Situation reports of information security

In addition, CERT-FI issues quarterly situation reports of information security, which

• discuss events that affect information security significantly;
• assess the near prospects of information security.

A summary of the past year's events is included in the last quarterly review of the year.

Coexisting with the CERT-FI is NCSA-Fi whose operations are based on security matters related to the electronic data transmission and handling of classified information.