Objectives and need for action National strategy for the protection of Switzerland against cyber risks 2018-2022 With the expansion of the target group of the NCS, support in the event of incidents must also be extended to other circles. When doing so, the existing quality of support in the identification, management and analysis of incidents must be maintained and the trustful exchange of information with operators of critical infrastructures must continue to be guaranteed. The already close cooperation with the relevant competence centres must be intensified in a targeted manner in order to make use of the limited specialised resources in Switzerland as effectively and efficiently as possible. In addition to the expansion and intensification of cooperation with third parties, internal federal processes for incident management must also be improved. While in principle each department must have the capability to address incidents in an appropriate manner, MELANI must be prepared to provide the necessary support under the direction of the Federal IT Steering Unit (FITSU). In the case of incidents affecting several departments and/or – in MELANI's assessment – constituting a threat to internal or external security, the incidents must be managed uniformly and on a centralised basis by the FITSU with the involvement of the affected departments. Also with the involvement of those departments, the FITSU immediately assesses the security policy and strategic impact of an incident. Measures 12) Expansion of MELANI as a public-private partnership for operators of critical infrastructures Support for operators of critical infrastructures is to be further expanded. The aim is for all critical sectors to be involved in the exchange of information, which should also increasingly be engaged in across all sectors. When expanding the PPP, it must be ensured that the quality of existing services is maintained. It must be clearly defined which members of the closed constituency are entitled to which services. 13) Development of services for all enterprises MELANI expands the target group and develops services in the area of prevention and incident management for a broader target group that is not limited to operators of critical infrastructures. The Swiss private sector and in particular small and medium-sized enterprises are to be supported by MELANI. Support is provided on a subsidiary basis to the protection and incident management services available on the market. 14) Cooperation between the federal government and relevant agencies and competence centres MELANI's already close cooperation with other relevant federal and cantonal agencies must be further strengthened. Due to the limited number of specialists available in Switzerland, cooperation with selected competence centres must be intensified and better coordinated in order to use the limited resources as effectively and efficiently as possible. 15) Processes and foundations for incident management in the Federal Administration In order to standardise incident management within the Federal Administration, a process is developed to clarify the reporting channels and responsibilities and to ensure the involvement of prosecution authorities and – in the case of incidents relevant to security policy or strategy – the SCG or the FCSC. The departments designate a contact point for the coordination of incident management, and the FITSU is granted the necessary power to give instructions for incident management. The Federal Chancellery coordinates communication in the event of cyber incidents affecting several departments. 19