Framework
Full specification

CER Finland

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

A Finnish law that implements the EU's CER Directive to enhance the resilience of critical infrastructure and entities against physical threats across eleven essential sectors.

The Finnish Act on the Protection of Infrastructure Critical to Society and on the Improvement of Resilience (310/2025), commonly known as the CER Act, transposes the EU's Critical Entities Resilience (CER) Directive into Finland's national legislation. The law, which entered into force on July 1, 2025, aims to enhance national security and the resilience of society by ensuring that essential services can operate with minimal disruption under all circumstances. It mandates that critical entities, to be identified by responsible ministries by July 17, 2026, must conduct regular risk assessments, implement measures to ensure their resilience, and report significant incidents. The legislation covers eleven sectors: energy, transport, banking, financial market infrastructure, health, drinking water, wastewater, digital infrastructure, public administration, space, and food. This act complements Finland's Cybersecurity Act (implementing NIS2), with critical entities under CER also being subject to cybersecurity obligations.
No items found.
Tasks
17
Scope
Want to see how Cyberday helps users address
CER Finland
compliance?
Start free trial
Here's what
CER Finland
requires and how to comply.

Below you'll find all of the requirements of this framework. In Cyberday, we map all requirement to global tasks, making multi-compliance management easy. Do it once, and see the progress across all frameworks!

Requirements
14 §.(1): Riskiarvioinnin suorittaminen ja aikataulu
14 §.(2): Riskiarvioinnin sisältö ja laajuus
15 §.(2).1: Poikkeamien ehkäiseminen
15 §.(2).2: Fyysinen suojaaminen
15 §.(2).3: Poikkeamiin vastaaminen ja niiden lieventäminen
15 §.(2).4: Poikkeamista palautuminen
15 §.(2).5: Henkilöstöturvallisuuden varmistaminen
15 §.(2).6: Tiedottaminen henkilöstölle
15 §.(2).7: Toteuttamisaikataulu
15 §.(3): Muun lain mukaisen suunnitelman hyödyntäminen
15 §.(4): Nimetty yhteyspiste
16 §: Poikkeamia koskeva ilmoitusvelvollisuus
17 §: Ensi-ilmoituksen ja yksityiskohtaisen raportin sisältö
15 §.(1): Häiriönsietokykyä koskeva suunnitelma
CER Finland
learning hub

Explore our comprehensive resources and improve your security with the themes of this framework.

Start working on
CER Finland

This framework is available in Cyberday. Start working on your compliance now!

Start free trial
How Cyberday helps with
CER Finland

Discover specific ways our platform streamlines your compliance process, from automated controls to audit preparation.

Explore use case
Free
CER Finland
assessment

Take our comprehensive assessment to identify gaps in your current implementation and get personalized recommendations.

Start assessment
Read more about
CER Finland

Dive deeper with our articles, case studies, and expert insights on framework implementation.

Read article
Guide to compliance

Get a concise overview of all requirements, controls, and implementation steps in our quick guide.

Get the guide
Framework comparison

See how the overlap and differences with any other framework to optimize your compliance strategy.

Compare framework
Join a live
CER Finland
webinar

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
Join our live webinars

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
What are frameworks?

Understand the basics of cyber security frameworks with our comprehensive guide.

Read the article

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Get your compliance
foundation in minutes.

Learn what an AI-powered ISMS looks like in practice.
Start a free trial and see your compliance work launch in minutes.

Start free trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templatesTrust center
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessmentsInternal audits
Resources
AcademyWebinarsBlogHelp articlesVideo coursesTrust centerContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security