National Cyberstrategy (NCS) M11 Cyberdefence Description The freedom of action and integrity of the state, business community and population must be protected in cyberspace and defended in the event of a conflict. Cyberdefence includes all intelligence and military measures serving the following purposes: protecting systems critical to national defence, defending against cyberattacks, ensuring the operational readiness of the Swiss Armed Forces in all situations, and building capacities and capabilities to provide subsidiary support to civilian authorities. This includes active measures to detect threats, to identify attackers and to disrupt and prevent attacks. Background and need for action Overview of measure The Federal Intelligence Service (FIS) and the Swiss Armed Forces have expanded their capabilities for their cyberdefence tasks. The Gesamtkonzeption Cyber (cyber global concept) describes the capabilities that the Swiss Armed Forces will need to develop by the mid-2030s to be able to counter threats in and from the cyber and electromagnetic environment (CEME). With the Intelligence Service Act (IntelSA) and the revised Armed Forces Act (ArmA), the Confederation has the necessary legal basis for active countermeasures as part of cyberdefence. However, the development of cyberattacks in recent years and their growing complexity increasingly ties up resources over longer periods. Further action is therefore needed in terms of expanding capabilities and coordinating with the responsible federal units to ensure compliance with international law. - Priorities - - Key actors - Expansion of centralised capabilities at Armed Forces level. These include CEME self-protection, anticipation and autonomy, as well as basic competency in data science. Development of decentralised capabilities. This includes, for example, robust and secure data processing within battalions and companies. Another focus is expanding the resilience of mission-relevant core infrastructure in CEME selfprotection. The organisation of units will also be adjusted. Maturation of political case processing for cybercampaigns with security policy implications. Enhanced integration of Switzerland's capabilities to achieve a direct protective effect for Swiss stakeholders. Extension of basic capabilities for operations in cyberspace at FIS and Armed Forces level. Confederation: Armed Forces, CYD Campus, FIS, GS DDPS Cantons: cantonal management organisations 27