Kyberturvallisuuslaki 124/2025 Copilot
Navigate Finland's NIS 2 transposition with clarity
What the Kyberturvallisuuslaki 124/2025 Copilot Can Do
Understand the difference between keskeinen and muu kuin keskeinen toimija under §§ 3–4
Map your organisation's sector to the correct supervisory authority under § 26
Track the three-phase incident reporting timeline set out in §§ 11–13
Identify risk management obligations applicable to your entity type under luku 2
Interpret the penalty thresholds and mitigating factors in §§ 37–39
Navigate the role of Kyberturvallisuuskeskus as contact point under § 18
About Kyberturvallisuuslaki 124/2025 Copilot
Kyberturvallisuuslaki 124/2025 is Finland's transposition of the EU NIS 2 Directive, establishing cybersecurity risk management, incident reporting, and supervisory obligations for essential and important entities. ISMS Copilot helps you work through the law's requirements, sector-specific supervisory structure, and penalty framework.
Frequently Asked Questions
What is Kyberturvallisuuslaki 124/2025?
Kyberturvallisuuslaki 124/2025 is Finland's national law transposing Directive (EU) 2022/2555 (NIS 2), enacted on 4 April 2025 and in force from 8 April 2025. It sets out cybersecurity risk management, incident reporting, supervision, and administrative penalty rules for essential entities and other entities (muu kuin keskeinen toimija) operating in Finland.
How does the Kyberturvallisuuslaki 124/2025 Copilot help?
The Copilot helps you interpret specific provisions of the law — such as the incident notification deadlines in §§ 11–13, the sector-based supervisory model in § 26, and the penalty framework in §§ 35–40 — so you can understand what the law requires and prepare your internal processes accordingly.
Which authority supervises my organisation under this law?
Supervision is sector-specific rather than centralised: § 26 designates several parallel supervisory authorities, including Traficom, Energiavirasto, Tukes, and others, each responsible for defined sectors listed in the law's annex. The Copilot can help you identify which § 26 authority is relevant for your sector.
Ready to streamline your compliance work?
Built for speed, accuracy, and audit-ready output.