National Cyberstrategy (NCS) importance for Switzerland may be processed outside its borders, meaning that legal protection over access to and use of this data can no longer be governed by Swiss legislation alone. In addition, cloud computing can potentially lead to a high level of dependency on a small number of providers. Without appropriate countermeasures, these impacts of cloud computing could compromise cybersecurity. - Internet of Things (IoT): The networking of physical objects ("things") via the internet continues apace. This encompasses the control, monitoring and networking of systems in industry (operational technology) as well as of consumer goods. With regard to the cyberthreat situation, the first factor of major importance is the huge spread of IoT. The linking of thousands of devices creates very complex system landscapes and massively expands the potential attack surface. Secondly, this interconnectedness also increases the threat from cybersabotage, making it easier to achieve a direct physical impact through cyberattacks. Thirdly, it has to be said that security is often not sufficiently considered in the manufacture of IoT devices or their subsequent life cycle, in order to keep costs down. This is counteracted at national and European level with regulations on the security of IoT devices (e.g. the OFCOM Ordinance on Telecommunications Installations). - Artificial intelligence: The availability of high computing power and data means that much wider use can now be made of artificial intelligence (AI). Thanks to partially or fully autonomous machine learning, AI applications are able to carry out very complex analyses in a short time. These possibilities can be used to better protect systems, but conversely they can also be harnessed to carry out attacks more effectively and efficiently. With many organisations increasingly relying on analysis by AI applications to support decision-making, attacks on such applications are also a relevant threat scenario. Moreover, AI applications can pose a security risk even without any external intervention if a faulty application causes a malfunction or a data leak. As well as developments in the core digitalisation technologies, it is important to consider technological developments for which there is no immediate prospect of widespread application, but whose use could have a direct impact on cybersecurity. One example is quantum technology, which makes it possible to solve certain mathematical problems much more efficiently than with today's computers. This could break widely-used asymmetric cryptology methods, and post-quantum algorithms will need to be developed and deployed. Such technological advances must therefore be taken into account when implementing the strategy measures. 1.2 Current status of protection against cyberthreats in Switzerland This strategy is based on the work of the first two strategies for the protection of Switzerland against cyber-risks, which were implemented from 2012 to 2017 and from 2018 to 2022. It also fits into the strategic context created by Switzerland's digitalisation and security policy orientation. The status of protection against cyberthreats in Switzerland is reflected institutionally in the organisation of the Confederation and in the bodies set up to promote cooperation between the Confederation, cantons, business community and universities. The first two national cyberstrategies The first two NCSs focused on developing and expanding capabilities, structures and processes. Implementation of the strategies has created the necessary basis for a coherent cybersecurity policy in Switzerland. As part of these strategies, fundamental decisions have also been made about the organisational structures of cybersecurity policy. A competence centre, the National Cyber Security Centre (NCSC), has been established within the 7

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents