During 2019, the central office implemented four management support projects: 1) EFQM self-assessment, 2) mapping key risks, 3) project development, and 4) supervisor training. Organisation of the central office The priorities resulting from the EFQM self-assessment are reflected in the development programmes of the new strategy and, for example, in the development of adaptation coaching in a client-oriented manner. The mapping of key risks was carried out as a service provided by LähiTapiola and laid the basis for systematic risk management. The project development work built a project model for the CSF, trained a large number of project managers, created a project portfolio and agreed on the rules of the game for launching new projects. Supervisor training was carried out in such a way that all those in managerial positions had the opportunity to take part in it. The aim of the training was to develop a common management style for CSF supervisors and to boost the personal abilities and skills of each supervisor in their work. Management group and management teams The work of the management team was reformed so that there is only one overall management team and under it three management teams: one each for the Cancer Registry, the Cancer Foundation and for the operations of the CSF. All those in managerial positions are regularly invited to one of the meetings related to training, and strategic and operational planning. Management of the Cancer Foundation The foundation does not have its own staff, and therefore the staff of the CSF takes care of the work of the foundation. Sakari Karjalainen, MD, PhD, has been the Foundation’s secretary general. Administrative and salary costs of €576 000 were transferred to the Foundation (€75 000 in 2018). Pension fund The Cancer Society is responsible for the pension liability of the former CSF pension fund, dissolved in 1981, and for a separate pension liability. There are 56 persons in the scope of this liability. Realising social responsibility The Cancer Society closely determines its relationship with the tobacco, alcohol, and pharmaceutical industries. We do not cooperate with those who receive funding from the tobacco or alcohol industry. In the CSF investment plan, companies in this industrial sector have been excluded from possible investment targets. Any collaboration with the pharmaceutical industry complies with the industry’s own ethical rules concerning cooperation with patient organisations. In line with CSF policy, we may cooperate with pharmaceutical companies but projects must then involve at least three pharmaceutical companies. The CSF is a smoke-free workplace. We observe the principles of sustainable development in all procurement and activities,. Offices The central office of the CSF is located in Helsinki at Unioninkatu 22, in premises owned by the property company Sponda. The office space covers 1 215 m2. The CSF management, financial, data and general administration, health department and communications unit, as well as the Cancer Foundation’s communications and fundraising department, the Finnish Cancer Registry and the Mass Screening Registry all operate from the central office. The spatial arrangement is safe in terms of occupational health and safety, and the use of space is convenient and efficient. The modern business premises can be easily adapted to the needs of the various units. Applying the Public Procurement Act Under the Public Procurement Act, the Cancer Society puts out to tender all activities that are funded by the Funding Centre for Social Welfare and Health Organisations. As a rule, all procurements and outsourced services for administration, data management, communications and fundraising are put out to tender at least as so-called mini procurements, where bids are requested from three different suppliers on the basis of set criteria. Data management The CSF’s data management deals with the data systems services and coordinates the organisation’s procurement and development projects related to data systems. The task of the IT team is to provide services for registration and mass screening activities and to support research activities. The IT team develops and maintains applications that support operational activities and the electronic cancer notification form. It is also responsible for the Cancer Registry’s data resources. The data management services are also target-ed at support services for the CSF. Some of the data management services also concern the Cancer Registry’s registration work and supporting research activity. Data management as a strategic policy utilises external purchasing services to support our organization if required. This enables challenging technical projects to be implemented cost-effectively and expertly. During 2019, the introduction of Windows 10 for workstations was completed. We also switched to a leasing model for the purchase of workstations and telephone equipment. This enables efficient work tools that are suitable for their intended use and the introduction of a responsible life cycle approach. During the year, we joined the Finnish University and Research Network (Funet) community. We got a fast and stable Internet connection and access to the Centre for Science’s (CSC) high-performance computing cost-effectively. With the introduction of the Funet Internet connection, network monitoring was intensified and related equipment was upgraded. We developed intranet manageability and monitoring as part of the development of infor-mation security. This work will also continue in 2020 with the upgrade of the intranet’s active devices. An enterprise resource planning system (Järkkäri) was deployed in nine member associations in 2018. In 2019, the system was introduced in three new associations, increasing the total number of associations using the system to 12. A steering group was set up to support the system’s operations, which will continue to design and develop the system. The system is constantly being developed and over the past year a few major upgrades and numerous mi-nor improvements have been made to the system. During 2020, the system will get a new look with the upgrading of the user interface. Data protection and security The CSF is subject to the document processing, classification and data security requirements that apply to government authorities (Government Decree on Information Security in Central Government 681/2010, the so-called Decree on Infor-mation Security). Personal data were processed in accordance with the Personal Data Act (523/1999) insofar as it did not conflict with the General Data Protection Regulation (679/2016) and the Data Protection Act (1050/2018). The CSF and its employees are jointly responsible for working safely in terms of data protection and security. At the CSF, data protection and security are handled by the data protection officer, the data security manager, a person consulting technical data security and a data security group dealing with data protection and data security issues. The data protection officer and the data security manager started to familiarise new employees with data protection and data security issues using a presentation that is constantly being updated. Twenty-three employees participated in the orientation events held in March and October 2019. An event was held for all employees to present a new security room table, updated encrypted email usage instructions, and a security breach notification form. The ground rules for the use of Teams were also agreed upon. The data security incident response process has been redone, and now includes a communications perspective. The risk phishing was reduced by moving to a two-step login process. The obligations imposed by the General Data Protection Regulation have been implemented by continuing to inform data subjects about their rights and the processing of their personal data in personal registers. Data protection agreements were concluded for the processing of personal data outsourced to subcontractors. The Cancer Registry’s second data audit was published. Member associations were advised on data protection issues.