In this paper we study how the cyber-physical space of a small nation is policed. Our qualitative study is based on content analysis of expert interviews. We found that the country is protected and daily incidents solved by a network of government agencies and private companies, forming a loose public–private partnership network. However, at the time of the study (Winter 2013), we were able to detect two problems. First, it was not clear that sufficient focus would be available to resolve several simultaneous large incidents. Second, cybercrimes are still under-reported, which may hinder the police in building investigation capacity.
GreveCHodgeGA (2010) Public-private Partnerships and Public Governance Challenges. In: OsborneSP (ed.) The New Public Governance? Emerging Perspectives on the Theory and Practice of Public Governance. London: Routledge, pp.149–162.
15.
HarknettRJSteverAJ (2011) The new policy world of cybersecurity. Public Administration Review71(3): 455–460.
16.
HodgeGAGreveC (2007) Public-private partnerships: An international performance review. Public Administration Review67(3): 545–558.
17.
JOIN/2013/01 final. Joint communication to the European parliament, the Council, the European Economic and Social Committee and the Committee of the Regions. Cybersecurity strategy of the European Union: an open, safe and secure cyberspace. Brussels, 7 February 2013.
18.
KääriäinenJSirénR (2011) Trust in the police, generalized trust and reporting crime. European Journal of Criminology8(1): 65–81.
19.
KiravuoTSäreläMMannerJ (2013) Weapons against cyber-physical targets. In: Distributed computing systems workshops (ICDCSW), 2013 IEEE 33rd International Conference, Philadelphia, PA, 8–11 July 2013, pp. 321–326. Philadelphia, PA: IEEE.
20.
KiravuoTTiilikainenSSäreläMMannerJ (2015) Peeking under the skirts of a nation: finding ICS vulnerabilities in the critical digital infrastructure. In 14th European conference on cyber warfare and security 2015, Hatfield, UK, 2–3 July 2015.
21.
LeverettÉP (2011) Quantitatively assessing and visualising industrial system attack surfaces. Thesis (Master’s), University of Cambridge, UK.
22.
LeviMWilliamsLM (2013) Multi-agency partnerships in cybercrime reduction. Mapping the UK information network cooperation space. Information Management and Computer Security21(5): 420–443.
23.
LewisTG (2006) Critical Infrastructure Protection in Homeland Security: Defending a Networked Nation. Chichester: Wiley.
24.
McQuaidRW (2010) Theory of organizational partnerships: partnership advantages, disadvantages and success factors. In: OsborneSP (ed.) The New Public Governance? Emerging Perspectives on the Theory and Practice of Public Governance. London: Routledge, pp.127–148.
25.
NahnJ (2010) Policing Cyberspace. A Structural and Cultural Analysis. El Paso, TX: LFB Scholarly Publishing.
26.
NahnJHueyL (2008) Policing through nodes, clusters and bandwidth. In: Leman-LangloisS (ed.) Technocrime: Technology, Crime and Social Control. Portland, OR: Willan, pp.66–87.
27.
NIST (2012) Computer Security Incident Handling Guide, 800-61. Revision 2. Gaithersburg, MD: National Institute of Standards and Technology. U.S. Department of Commerce.
28.
SulekDDoscherM (2012) Beyond public-private partnerships. Leadership strategies for securing cyberspace. In: AndreassonK (ed.) Cybersecurity. Public Sector Threats and Responses. Public Administration and Public Policy 165. Boca Raton, FL: Taylor & Francis Group, 293–325.
29.
OECD (2012) Cybersecurity Policy Making at a Turning Point: Analysing a New Generation of National Cybersecurity Strategies for the Internet Economy and Non-governmental Perspectives on a New Generation of National Cybersecurity Strategies: Contributions from BIAC, CSISAC and ITAC. Paris: OECD.
30.
OJ C115, 4.5.2010, p. 1–38.
31.
WallDS (2007a) Cybercrime: The Transformation of Crime in the Information Age. Crime and Society Series. Cambridge: Polity.
32.
WallDS (2007b) Policing cybercrimes: situating the public police in networks of security within cyberspace. Revised February 2011. Police Practice and Research: An International Journal8(2): 183–205.
33.
West-BrownMJStikvoortDKossakowskiKPKillcreceGRuefleR (2003) Handbook for Computer Security Incident response Teams (CSIRTs). Pittsburgh, PA: Carnegie-Mellon Univ, Software Engineering Inst.
34.
Act on the Measures Necessary to Secure Security of Supply (1390/1992)
35.
Act on the Protection of Privacy in Electronic Communications (516/2004)
36.
Coercive Measures Act (450/1987)
37.
Constitution of Finland (731/1999)
38.
Framework Decision on Combating Terrorism (2002/475/JHA)
39.
Government Decision on the Objectives of Security of Supply (350/2002)
