According to a Government report and a proposed amendment to the Emergency Powers Act, changes in the operating environment of foreign and security policy may also give rise to hybrid and cyber threats. In addition to denial-of-service attacks, data breaches and malware attacks, the threat of more serious hostile cyber activity has clearly increased. Hybrid threats can be diverse. For example, they can disrupt critical infrastructure for education and training. This can involve interruptions in electricity or water distribution and disruptions in internet connections, mobile phone networks and access control systems. Russia’s invasion of Ukraine has also increased information warfare.

According to the Finnish Ministry of the Interior, hybrid threats refer to malign external influence by which a state actor seeks to systematically influence the targeted country by combining different means. Authoritarian states employ hybrid influencing as a key instrument of influence.  The range of means may include political, diplomatic, economic and military means as well as information and cyber interference.

The risk of hybrid influencing has increased in the prevailing situation in Finland, and it is important that municipalities and other education and training providers pay attention to this matter in accordance with the national, regional and local guidelines issued by different authorities. 

It is typical that hybrid influencing can be difficult to identify. It may also be difficult to identify the threat caused to the vital functions of society as any signs of the threat may be minor in an individual administrative sector, such as education and teaching, and the threat can only be detected once a comprehensive situational picture covering all administrative sectors has been prepared. The municipality plays a key role in preparing for hybrid threats and creating a situational picture across administrative branches.  Hybrid influencing may also include using means that are, as such, legal, which may further complicate the identification of hybrid influencing. 

Back to top

Influencing through information refers to systematic actions designed to influence public opinion, people’s behaviour and decision-makers and, through this, the functions of society.  The methods of influence include dissemination of false or misleading information, exertion of pressure, and manipulative use of information that is in itself correct. This is a strategic activity designed to mislead the target so that it makes self-damaging decisions or acts against its own best interests. 

The topic of influencing through information can be addressed as part of media literacy. Social media plays a key role as a channel for influencing through information, and its tools can be used effectively in selecting ripe targets for messages. Children, young people and adults encounter influencing through information on social media services. The Finnish National Agency for Education has prepared support material for discussing the Russian invasion of Ukraine and social media themes.

Back to top

The National Cyber Security Centre offers materials for the prevention and identification of cyber threats. Links to the materials are provided at the bottom of this page.

Back to top

Municipalities must be able to perform their duties and ensure the well-being of residents regardless of any disruptions, threats and risks in the external or internal operating environment. Overall security in municipalities is managed through means such as preparedness planning and local security planning. In the municipal organisation, the education sector and its services are closely linked to other sectors and services. It is important that staff are aware of the operating chains in their organisation. National, regional, local and sector guidelines are taken into account in the preparedness work. The Regional State Administrative Agencies and the Association of Finnish Local and Regional Authorities provide instructions on preparedness to municipalities.

Preparing for hybrid and cyber security threats and influencing through information is appropriate at all levels of education and training, as cyber security is present in our digitalised daily life. The education and training provider is responsible for ensuring that early childhood education and care units, schools and educational institutions prepare for any disruptions. It is important that each staff member is aware of their role in preparing for disruptions and that children, pupils and students have received instructions and training on how to act in case of disruptions. 

The education and training provider should be prepared to act in situations in which the electronic systems used in day-to-day operations are temporarily disrupted. For example, disruptions in the electricity network, access control, water supply, internet connections and telecommunications network affect many functions.

To prepare for such disruptions, it is important to develop solutions that ensure the continuation of education and training, the well-being of children, young people and students, and the coping of staff. The issue should also be addressed in education and teaching in an age-appropriate manner.

Preparing for special arrangements related to disruptions requires, among other things,
•    reviewing the tasks and responsibilities of management and staff
•    substitute arrangements for management, such as sufficient substitute chains
•    non-electronic practices in education and training 
•    catering service disruptions
•    problems in school transport and public transport
•    impaired cleaning and property maintenance services
•    Practising how to act during a disruption is a prerequisite for successful operations in disruptions.

When faced with a possible disruption, the key is to
•    provide children and young people with as ordinary and good day-to-day education and training
•    ensure the well-being and coping of personnel, including management
•    use an approach that promotes and encourages a team spirit in interaction and communication and strengthens faith in the future
•    provide timely information on arrangements for guardians, children, pupils and students
•    safeguard education, learning and training as well as student welfare services and support for learning.

 

Back to top

Below are materials for various users (staff, children, pupils and students) from manuals and video training to a cyber weather summary in response to recent events. Addressing information and cyber security and influencing through information is part of education and teaching in accordance with the national core curriculum for early childhood education and care and the national core curriculum and the qualification requirements. The education provider is responsible for preparedness. It includes the induction and training of staff. 

Back to top

Back to top

Cyber Weather gives you an update on the key information security incidents and phenomena of the month.
The online training in eOppiva digital learning environment discusses the continuity of the operations and incident management from the perspective of a public administration organisation. However, the subject matter of this training can also be utilised in other organisations. The training is intended for directors of organisations, digital security experts and persons responsible for services and processes. Training duration is ca 30-60 mins.
Through the free of chanrge Digitally Secure Life trainings and game, you can learn to act safely in dangerous situations within the digital world.
Manual produced by the Swedish Civil Contingencies Agency (MSB) describing the principles and methods of identifying, understanding,
and countering information influence activities
Back to top