13 a §: Häiriötilanteista tiedottaminen ja varautuminen häiriötilanteisiin

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The authority must immediately inform those using its data sets if there is a disturbance in its data management that prevents or threatens to prevent the availability of the authority's data sets. The authority must inform about the estimated duration of the disruption or its threat, if possible, alternative ways to utilize the authority's data sets and the end of the disruption or threat.

Notifying the public about outages of the authority's digital services and other electronic data transfer methods is regulated by the Act on the Provision of Digital Services (306/2019 ) in section 4, subsection 2.

The information management unit must find out the essential risks to the continuity of its data processing, utilization of information systems and operations based on them. Based on the risk assessment, the information management unit has to ensure that the processing of its data materials, the utilization of information systems and the operations based on them continue as undisturbed as possible in the event of disturbances to normal conditions and in the exceptional conditions referred to in the Emergency Act (1552/2011) by means of advance preparation of contingency plans and operations in the event of disturbances, as well as other measures.

About the authorities in general the obligation to prepare for exceptional circumstances and the organization of state information management, data processing, electronic services, information traffic and information security in exceptional circumstances are stipulated in the Emergency Act.

This requirement is part of the framework:  
Public administration information management act

Other requirements of the framework

20929
13 a §: Häiriötilanteista tiedottaminen ja varautuminen häiriötilanteisiin
No items found.
Best practices
How to implement:
13 a §: Häiriötilanteista tiedottaminen ja varautuminen häiriötilanteisiin

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The authority must immediately inform those using its data sets if there is a disturbance in its data management that prevents or threatens to prevent the availability of the authority's data sets. The authority must inform about the estimated duration of the disruption or its threat, if possible, alternative ways to utilize the authority's data sets and the end of the disruption or threat.

Notifying the public about outages of the authority's digital services and other electronic data transfer methods is regulated by the Act on the Provision of Digital Services (306/2019 ) in section 4, subsection 2.

The information management unit must find out the essential risks to the continuity of its data processing, utilization of information systems and operations based on them. Based on the risk assessment, the information management unit has to ensure that the processing of its data materials, the utilization of information systems and the operations based on them continue as undisturbed as possible in the event of disturbances to normal conditions and in the exceptional conditions referred to in the Emergency Act (1552/2011) by means of advance preparation of contingency plans and operations in the event of disturbances, as well as other measures.

About the authorities in general the obligation to prepare for exceptional circumstances and the organization of state information management, data processing, electronic services, information traffic and information security in exceptional circumstances are stipulated in the Emergency Act.

Read below what concrete actions you can take to improve this ->
Frameworks that include requirements for this topic:
No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
13 a §: Häiriötilanteista tiedottaminen ja varautuminen häiriötilanteisiin
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
No other tasks found.

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
13 a §: Häiriötilanteista tiedottaminen ja varautuminen häiriötilanteisiin
of the framework  
Public administration information management act
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
Communication in the event of an incident and preperations
Critical
High
Normal
Low
2
requirements
Incident management
Incident management and response

Communication in the event of an incident and preperations

This task helps you comply with the following requirements

Preparation of contingency plans based on risk assessments
Critical
High
Normal
Low
2
requirements
Risk management and leadership
Continuity management

Preparation of contingency plans based on risk assessments

This task helps you comply with the following requirements

The ISMS component hierachy

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.