National Cyberstrategy (NCS)
importance for Switzerland may be processed outside its borders, meaning that legal
protection over access to and use of this data can no longer be governed by Swiss
legislation alone. In addition, cloud computing can potentially lead to a high level of
dependency on a small number of providers. Without appropriate countermeasures,
these impacts of cloud computing could compromise cybersecurity.
- Internet of Things (IoT): The networking of physical objects ("things") via the internet
continues apace. This encompasses the control, monitoring and networking of systems in
industry (operational technology) as well as of consumer goods. With regard to the
cyberthreat situation, the first factor of major importance is the huge spread of IoT. The
linking of thousands of devices creates very complex system landscapes and massively
expands the potential attack surface. Secondly, this interconnectedness also increases
the threat from cybersabotage, making it easier to achieve a direct physical impact
through cyberattacks. Thirdly, it has to be said that security is often not sufficiently
considered in the manufacture of IoT devices or their subsequent life cycle, in order to
keep costs down. This is counteracted at national and European level with regulations on
the security of IoT devices (e.g. the OFCOM Ordinance on Telecommunications
Installations).
- Artificial intelligence: The availability of high computing power and data means that
much wider use can now be made of artificial intelligence (AI). Thanks to partially or fully
autonomous machine learning, AI applications are able to carry out very complex
analyses in a short time. These possibilities can be used to better protect systems, but
conversely they can also be harnessed to carry out attacks more effectively and
efficiently. With many organisations increasingly relying on analysis by AI applications to
support decision-making, attacks on such applications are also a relevant threat scenario.
Moreover, AI applications can pose a security risk even without any external intervention
if a faulty application causes a malfunction or a data leak.
As well as developments in the core digitalisation technologies, it is important to consider
technological developments for which there is no immediate prospect of widespread
application, but whose use could have a direct impact on cybersecurity. One example is
quantum technology, which makes it possible to solve certain mathematical problems much
more efficiently than with today's computers. This could break widely-used asymmetric
cryptology methods, and post-quantum algorithms will need to be developed and deployed.
Such technological advances must therefore be taken into account when implementing the
strategy measures.
1.2 Current status of protection against cyberthreats in
Switzerland
This strategy is based on the work of the first two strategies for the protection of Switzerland
against cyber-risks, which were implemented from 2012 to 2017 and from 2018 to 2022. It
also fits into the strategic context created by Switzerland's digitalisation and security policy
orientation. The status of protection against cyberthreats in Switzerland is reflected
institutionally in the organisation of the Confederation and in the bodies set up to promote
cooperation between the Confederation, cantons, business community and universities.
The first two national cyberstrategies
The first two NCSs focused on developing and expanding capabilities, structures and
processes. Implementation of the strategies has created the necessary basis for a coherent
cybersecurity policy in Switzerland. As part of these strategies, fundamental decisions have
also been made about the organisational structures of cybersecurity policy. A competence
centre, the National Cyber Security Centre (NCSC), has been established within the
7
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents