Traficom's Verkkotietopiste 2023 recovery exercise

In the recovery exercise, the technical recovery of an information system was practiced in the event of a disruption caused by, for example, a cyberattack, and at the same time the cooperation of three organisations and the internal operations of each organisation were practiced in accordance with the processes of information security management, business continuity management and data protection management.

With its format, the service-specific exercise also aroused interest in Traficom's other functions and services.

The exercise was also valuable because its decision coincided with the current rapid change in the cyber climate, and Traficom was able to feed the results and lessons learned directly into the agency's own contingency planning and data protection incident management. In concrete terms, Traficom had at its disposal a comprehensive final report describing the state of the Verkkotietopiste's recovery capacity and thus improving the situational picture of preparedness of the agency and, by the way, of the central government.