National strategy for the protection of Switzerland against cyber risks 2018-2022 Measures 5) Improving ICT resilience of critical infrastructures The focus is on implementing measures to improve the ICT resilience of the critical subsectors, involving the relevant regulatory authorities and specialist offices. The bases for this are the existing risk and vulnerability analyses and the proposals for measures derived from them. In addition to implementing the identified measures, the analyses and measures must be updated regularly and, where necessary, adapted to new findings and developments. 6) Improving ICT resilience in the Federal Administration Improving the resilience of ICT in the Federal Administration is achieved by implementing the concept for analysing and dealing with ICT vulnerabilities in the Federal Administration. The concept provides for direct conclusions to be drawn from the identified vulnerabilities in order to select ICT security measures that can be sensibly implemented. To improve ICT resilience, targeted training and awareness-raising is provided in the departments to the persons responsible for protecting ICT infrastructures and for handling incidents, and it is ensured that information on security vulnerabilities or incidents can be exchanged among the competent bodies. 7) Exchange of experience and creation of foundations for improving ICT resilience in the cantons A network of public authorities will be created (or existing networks will be used) to exchange experiences and create common foundations for strengthening ICT resilience in the cantons. The aim is mutual support and coordinated action by the federal and cantonal authorities. 15