Settling of faults, disruptions and violations of information security

Telecommunications operators are legally obliged to notify FICORA of substantial violations of information security and faults and disruptions in communications networks and services. The notification obligation concerns both communications network- and service operators.

FICORA has specified the procedure of notification in its regulations FICORA 9 D/2009 M on obligation to notify of violations of information security in public telecommunications and FICORA 57 A/2012 M on the maintenance of communications networks and communications services, procedures and notifications in the event of fault and disturbances. FICORA's ragulations and the explanatory notes of them can be found from FICORA's webpage.

Purpose of notification obligation

The purpose of the notification obligation is to provide FICORA with necessary information for supervision and detection of information security violations. The information received from the operators is used, besides settlement of faults and disruptions and violations of information security, in preparation of regulations. The information given by the operators is also used for monitoring the general situation of threats to the systems of telecommunications operators.
Detailed examples of incidents to be reported to FICORA are given in the recommendation for application of FICORA’s regulation on the obligation to report information security incidents and faults and disturbances in public telecommunications. The notification obligation covers considerable violations of information security aimed at the telecommunications operator and substantial faults and disruptions.

Submitting a notification

It is recommended that the notification be made by electronic mail on a form available at FICORA’s website. There are separate forms for notifying of information security violations and threats and notification of faults and disruptions:

Regulation 9

Form 1: CERT-FI incident report
Form 2: Notification form of contact details for telecom operators

Regulation 57

Forms are available in Finnish only.

Form 1: Loppuraportti vika- ja häiriötilanteista teleyrityksessä
Form 2: Ilmoitus teleyrityksen yhteystiedoista vika- ja häiriötilanteissa