National Cyberstrategy (NCS) M10 Crisis management Description Cyberincidents can have serious consequences and escalate to the point where crisis management becomes necessary at national level. An up-to-date, uniform and comprehensive picture of the situation is crucial for handling crises, as are the definition of efficient decision-making processes and a communication strategy. The associated capabilities and structures must be practised, reviewed and adapted on a regular basis. Background and need for action Overview of measure Interdisciplinary cooperation is crucial in the event of a crisis. When a crisis occurs, the NCSC must be able to establish cooperation quickly with all the partners. To this end, it has contacts with the relevant organisations within and outside the Federal Administration. The NCSC has also been integrated into the federal crisis teams. In the event of any further developments or reorganisations of crisis management at federal level, it must also be ensured that cybersecurity is included directly in crisis management structures. Cooperation between key actors from the Confederation, cantons and business community in managing a crisis under time pressure is challenging. For such cooperation to work, regular exercises are needed. Switzerland currently takes part in international exercises, and some sector-specific exercises have been carried out nationally. However, there is no overarching concept for planning and implementing crisis exercises related to cybersecurity. This plan must be drawn up and incorporated into the overall planning of crisis exercises. Priorities - - Key actors - Design and implementation of sector-specific (e.g. energy supply, water supply, healthcare) and cross-sectoral cyberexercises. The plan and design must be coordinated with the overall planning of crisis exercises. Integration of cybersecurity aspects into all planned crisis exercises. Clarifying the basics in coordination with the overarching work on crisis management organisation: What criteria define a cybersecurity-related crisis? Which structures are responsible for political assessment and for initiating crisis management measures? Ensuring that cybersecurity is represented in the crisis management system (at federal and canton levels). Clarifying the (subsidiary) support for crisis management in the network, including the means of communication to be used. Confederation: FCh, FOCP, NCSC, Armed Forces, FDFA, FOCA, FONES, FOT, GS DDPS, OFCOM, SFOE, SSN Cantons: cantonal management organisations, cantonal cybersecurity competence centres Business community/society: operators of critical infrastructures, manufacturers/providers of critical software, sector organisations (e.g. Swiss FS-CSC, SWITCH-CERT) 26