National Communications Security Authority - NCSA-FI

The national communications authority operating within FICORA is part of Finland's security authority organisation.

National Security Authority (NSA)

In Finland, overall responsibility for international information assurance obligations lies with the Ministry of Foreign Affairs. The ministry acts as a National Security Authority (NSA), steering national operations and taking responsibility for the preparation of international security treaties, for example. It also controls and monitors that international classified information is protected and appropriately handled in international cooperation by Finnish companies and organisations.

The Ministry of Defence, the Finnish Security Intelligence Service, and the Defence Command Finland are other Designated Security Authorities (DSA) each having their responsibilities in the overall field of Finland's security authority organisation.

FICORA acts as Designated Security Authority and as a National Communications Security Authority (NCSA), specializing in information assurance matters related to the handling of classified information in electronic communications.

NCSA-FI's communications security authority duties

The duties of a communications security authority include

• Preparation of guidance and agreements related to national security activities, as well as guidance related to the handling of international classified information.
• Management of the crypto material distribution network, accounting and guidance for the secure handling of crypto material (CDA).
• Approval of cryptographic products for protecting international classified information in Finland (CAA).
• Accreditation of information systems processing international classified information (SAA). Governmental systems that relate to the fulfilment of international information assurance obligations, and the systems of companies participating in international invitations for tender requiring accreditation of a National Communications Security Authority, fall within the scope of the accreditation process. Auditing activities related to the accreditation process are subject to a charge and accreditation is valid for a limited period.

In addition, the duties of a communications security authority include cooperation with international and national security players.

National security auditing criteria (KATAKRI)

The primary goal of the national security auditing criteria is to unify the authorities’ operations in cases where an authority performs an audit verifying the security level of a company or organisation site. Also, FICORA utilises KATAKRI in the information system audits it conducts.

Security Accreditation Authority i.e. SAA
Crypto Distribution Authority i.e. CDA
Crypto Approval Authority i.e. CAA

Further information

Finnish Communications Regulatory Authority (FICORA)
P.O. Box 313
FI-00181 Helsinki
Itämerenkatu 3 A
Helsinki

Telephone +358 9 69 661
Fax +358 9 6966 410

E-mail
general: ncsa (at) ficora (dot) fi
accreditation of information systems: accreditation (at) ficora (dot) fi
Replace (at) by @ and (dot) by .