National strategy for the protection of Switzerland against cyber risks 2018-2022 4 Spheres of action and measures of the NCS 20182022 In order to achieve the strategic objectives, measures must be implemented in a very wide range of areas. The NCS distinguishes among ten spheres of action, which address different aspects of cyber risks. A total of 29 measures are formulated in these spheres of action. Table 2 lists the spheres of action and measures of the NCS 2018-2022: Sphere of action Measures Building competencies and knowledge Threat situation Resilience management Standardisation / Regulation Incident management Crisis management Prosecution Cyber defence Active positioning of Switzerland in international cyber security policy Public impact and awareness raising 1. Early identification of trends and technologies and knowledge building 2. Expansion and promotion of research and educational competence 3. Creation of a favourable framework for an innovative ICT security economy in Switzerland 4. Expansion of capabilities for assessing and presenting the cyber threat situation 5. Improving ICT resilience of critical infrastructures 6. Improving ICT resilience in the Federal Administration 7. Exchange of experience and creation of foundations for improving ICT resilience in the cantons 8. Evaluation and introduction of minimum standards 9. Examination of a reporting obligation for cyber incidents and decision on introduction 10. Global internet governance 11. Building expertise on standardisation questions relating to cyber security 12. Expansion of MELANI as a public-private partnership for operators of critical infrastructures 13. Development of services for all enterprises 14. Cooperation between the federal government and relevant agencies and competence centres 15. Processes and foundations for incident management of the federal government 16. Integration of the responsible cyber security offices into the federal crisis teams 17. Joint crisis management exercises 18. Picture of the cybercrime situation 19. Investigation Support Network for Digital Law Enforcement 20. Training 21. Central Office for Cybercrime 22. Expansion of capabilities for information gathering and attribution 23. Capability for implementing active measures in cyberspace under the IntelSA and ArmA 24. Ensuring the Armed Forces' operational readiness across all situations in cyberspace and regulating their subsidiary role in support of the civilian authorities 25. Active shaping of and participation in processes of foreign cyber security policy 26. International cooperation to build and expand cyber security capacities 27. Bilateral political consultations and multilateral dialogues on foreign cyber security policy 28. Creation and implementation of a communication concept for the NCS 29. Raising public awareness of cyber risks These spheres of action and measures are described in more detail below. Excluded for now are the questions of which bodies should be responsible for the measures and whether the legal foundations for the measures already exist or still need to be created. Both questions are to be addressed in the implementation plan. 10