Lifecycle
- Effective
- Last change
Country / jurisdiction: Finland · Year: 2025 · Status: In force · Level: National · Type: Voluntary
The Act specifically lists various actors within the energy sector that fall under the scope of this law. Actors must manage cybersecurity risks by implementing proportionate technical, operational, and organizational measures and maintain an updated action model. They are also required to report significant incidents to the supervisory authority without delay and fulfill information obligations related to their cybersecurity practices.
Official source: https://finlex.fi/en/legislation/collection/2025/124
Source
https://www.iea.org/policies/26595Canonical document at the regulator. Always cite this URL — not the Vantage detail page — in compliance evidence.