National Cyberstrategy (NCS) M3 Threat situation Description In order to assess the threat situation, it is necessary to determine which actors exploit or could exploit which attack vectors and vulnerabilities. As part of this process, the threats should also be weighted. The result is an assessment of the threat situation, on the basis of which the business community, society and administration can identify and implement their risk-minimising measures in the most cost-effective and targeted way possible. The threat situation is thus intended to reveal not only fundamental and broad-impact threats, but also those that are business- and process-specific. Background and need for action Overview of measure Switzerland already has periodically updated tactical, operational and strategic representations of the threat situation in the cyberdomain. These are informed by observation of threat actors and their actual and potential capabilities, as well as information about the damage or failures caused by cyberincidents. Due to the increasing digitalisation of processes in various sectors of the economy, there is a growing need for threat assessments specific to these sectors. This need will be met by processing threat-related information in a way that is appropriate for the target group. Threat-related information will be communicated to companies and other organisations according to their needs. Key actors Priorities - - Further development of situation monitoring with a focus on those actors who pose a threat to Switzerland at a tactical, operational and strategic level. Further development of the assessment and processing of situation-relevant information. Level-appropriate provision for the business community, society and administration. Support for setting up sector-specific information sharing and analysis centres (ISACs) and establishment of close cooperation to assess specific threat situations. Confederation: FIS, NCSC Cantons: cantonal police corps, cantonal cybersecurity competence centres, IT offices, NEDIK Business community/society: private-sector CERTs/SOCs, ISACs, security service providers, SWITCH 16