Technical systems of the Finnish Service Catalogue

The Digital and Population Data Services Agency is responsible for the production of the Suomi.fi Finnish Service Catalogue. The Digital and Population Data Services Agency and the client organisation's rights and obligations are described in the following documents:

• Terms of use for the Suomi.fi Finnish Service Catalogue
• Act on Central Government’s Joint e-Service Support Services (Finlex) (in Finnish)Opens in a new window.

Organisations that choose to deploy the Suomi.fi Finnish Service Catalogue are responsible for producing and maintaining their data.

Changes to the Finnish Service Catalogue are notified to client organisations by email according to the contact information provided, in the FSC user interface and in certain cases, on the Suomi.fi for Service Developers website.

Normal and anticipated external disruptions and security threats have been taken into consideration in the design and implementation of the Finnish Service Catalogue. Processes are in place for monitoring and incident management.

The service level accessibility goal for the Finnish Service Catalogue is 99.5%. The aim is to correct faults as quickly as possible. The Digital and Population Data Services Agency provides support for technical problems during office hours.

Measuring and reporting service levels

The following are monitored for the Suomi.fi Finnish Service Catalogue:

• the quality of the hosting services as specified in the SLA
• the quality of service (data security and usability audits)
• client organisations’ satisfaction through regular surveys.

The requirements of information security have been addressed in the design and provision of the Suomi.fi Finnish Service Catalogue. The production environment of the service is secure, and any integrations and links to the service have been implemented in compliance with the applicable requirements.

The Digital and Population Data Services Agency uses a risk management technique to assess the need to meet information security requirements related to the services and the implementation of information security. In addition, the risks associated with the service are regularly monitored.

The design and provision of the service complies with the legislation on information security and data protection. A privacy statement has been created on the processing of personal data. The planning and implementation of the service takes into account the data security requirements that apply to the processing of personal data. The data security requirements are stricter than those required for protection level IV.

The production environment of the service meets the data security requirements for protection level IV.

The Digital and Population Data Services Agency carries out regular performance tests. When changes are made to the service, the functionality of the changes and the data security of the service are tested in advance. Testing is also performed to ensure disturbance-free operation of the service during the changes. The Digital and Population Data Services Agency has created a testing plan for the Suomi.fi services.

The service is audited by both the Digital and Population Data Services Agency and external parties.

The usability and reliability of the Service are regularly monitored from reports submitted by the Digital and Population Data Services Agency's hosting services supplier.