National strategy for the protection of Switzerland against cyber risks 2018-2022 5.2 Cooperation with third parties It is a strategic objective of the NCS to ensure collaborative cooperation to protect Switzerland against cyber risks. It is accordingly important that the cantons, the private sector and society are directly involved in the implementation work. While the federal government provides binding specifications in the implementation plan regarding the competences and duties of the federal offices, it should also be defined which tasks are to be assumed by the cantons as well as business and social organisations. The cantons and business and social organisations are therefore involved in drawing up the implementation plan. 5.2.1 Participation of the cantons in implementation In order to ensure the direct involvement of the cantons in the implementation of the NCS 2018-22 measures that affect them, the CCJPD together with the SSN prepares a cantonal implementation plan. On this basis, the NCS implementation plan sets out the measures in which the cantons are directly involved and the objectives to be achieved in this regard. 5.2.2 Participation of the private sector and society The NCS implementation plan sets out which business and social organisations choose to commit themselves to implementing which measures. The list of business and social organisation is not exhaustive, and participation by other organisations are still possible at any time. 5.2.3 Coordination of implementation All participants coordinate their activities under the overall project management and regularly agree on the implementation work. They check whether additional measures are necessary to achieve the NCS objectives. For this purpose, a coordination body consisting of representatives of the federal government, the cantons and the private sector is established. 5.3 Performance targets for implementation of the measures In order to evaluate the implementation progress, measurable performance targets must be defined for all measures. Starting from the current situation in the areas affected by the measure, it is set out which goals are to be achieved by when. For example, performance targets specify by when specific products are to be created, which projects or project steps are to be completed, and which processes need to be established or further developed where appropriate. 5.4 Updating the NCS This strategy will be updated at the end of 2022. While implementation is regularly reviewed and adjusted as necessary, early updating of the NCS is envisaged only if there are unexpected developments in the threat situation or if other factors arise that call into question the basic assumptions set out in the background chapter. In the event of an early update, the new version of the NCS will be submitted to the Federal Council, the federal offices, the cantons and representatives of the private sector. 28