Information of classification levels IV–II may be processed in a security area. Information of classification levels III–II must be stored in a security area.
Technical security areas follow the general protection practices for security areas, as well as the following additional practices:
- the area has an intrusion detection system
- the area is kept locked when not in use and guarded when in use
- keys are controlled
- individuals and materials entering the area are monitored
- the area is regularly inspected to detect any unauthorized communication connections, communication devices, or other electronic equipment
- there are no unauthorized communication connections or devices within the area
- all equipment brought into the area must be inspected before use, particularly in areas where meetings involving EU SECRET/NATO SECRET classified information are held.
The Finnish Security Intelligence Service or the Defence Command decides on the threat assessment, risk management measures, and possible approval of temporary security arrangements for a technically protected security area.
