National strategy for the protection of Switzerland against cyber risks 2018-2022 2) Expansion and promotion of competence building In an exchange involving the private sector, universities, the federal government, and the cantons, the need is analysed for building competence in cyber risks. In particular, it is examined how the topic of cyber risks can be increasingly integrated into existing courses of study. 3) Creation of a favourable framework for an innovative ICT security economy in Switzerland Switzerland should be an attractive location for companies in the field of ICT security. An increased exchange between the private sector and research should help promote innovative start-ups in this area. For this purpose, existing means as referred to in Measure 1 are also available. In cooperation with the associations and universities, further measures to improve the framework for the ICT security economy will be examined and implemented as necessary. 4.2 Threat situation Description As described in the background chapter, the cyber threat situation is characterised by a wide range of possible threats. These threats differ with regard to the purpose of the attacks, the actors behind the attacks, and the circle of those affected. The boundaries between different threats are often not clear, given that attackers can pursue different purposes at the same time and also combine the nature and targets of the attack. Together with the highly dynamic nature of the development of cyber risks, this complexity and diffusion make it a challenge to gain a comprehensive overview of the cyber threat situation. However, such an overview is a key element for protection against cyber risks. It is the basis for the selection and prioritisation of preventive and reactive measures and is indispensable for making the right decisions in the event of incidents and crisis situations. For this purpose, an assessment of existing threats and their future developments is required (description and assessment of the situation). Background As part of implementation of the NCS from 2013 to 2017, capabilities in situation description and evaluation, early identification, and attribution were built up. The processes required to create a holistic picture of the situation have been established, and the information on the threat situation is summarised and presented with the aid of a dynamic, interactive situation radar and made available to public authorities and operators of critical infrastructures. Objectives and need for action Overview of sphere of action In order to protect Switzerland from cyber risks, the country remains dependent on a holistic picture of the cyber situation. In view of the intensified threat situation, existing capabilities must be expanded, and the exchange of information with the private sector and the cantons must be further strengthened. The systematic evaluation and compilation of cyber incidents is currently not guaranteed, given that the available resources are heavily absorbed by day-to-day business. The aim is to achieve greater depth and granularity in the assessment of relevant threats to Switzerland. Moreover, findings on the threat situation should no longer be made available only to the authorities and operators of critical infrastructures, but also in an appropriate form to other Swiss enterprises and the population. 12