Big case handling @ NCSC-FI - Matias Mesiä
Disobey 2026 · Main Stage
Matias Mesiä, Head of Operations at the National Cyber Security Centre Finland (NCSC-FI), delivered a compelling talk at Disobey, offering an insider's perspective on the complexities and critical importance of managing "big cases" – major cyber incidents – at a national level. The presentation, aptly titled "Big case handling @ NCSC-FI," delves into the strategies, processes, and challenges faced by a national Computer Emergency Response Team (CERT) responsible for the cybersecurity of an entire nation, encompassing every citizen, organization, and agency in Finland. Mesiä's talk highlights the sheer scale of operations, from automated incident handling to deeply involved, multi-agency "seizure operations" that demand significant resources and intricate coordination.
AI review
Mesiä delivers a rare, unfiltered look at how a national CERT actually operates under fire — not a polished comms piece, but a practitioner talking honestly about failures, resource constraints, and the unglamorous grind of big-case coordination. The Helsinki breach, Vtory zero-day, and Flubot regulatory action aren't just name-drops; they're used to illustrate real decision-making friction that peers can learn from.