National Cyberstrategy (NCS) 3 NCS measures The measures described in this chapter are implemented to achieve the five strategic objectives. The measures build on previous activities and specify how these need to be expanded, further developed and supplemented in order to achieve the strategic objectives. The priorities when implementing the measures and the actors involved are also described. The list of priorities reflects the situation at the time the strategy was drawn up and is continuously reviewed by the NCS Steering Committee and supplemented as necessary. The list of actors is not exhaustive, but is intended to indicate to the Steering Committee which actors to contact when assessing and further developing the measure. In the listings of key actors in the Federal Administration, the administrative units with primary responsibility are stated first in italics, followed by the other relevant actors (listed alphabetically). Cantons, university, private-sector and society organisations are listed separately. Abbreviations are used for all organisations. These are explained in the list of abbreviations. Before any measures are implemented, checks must be carried out to establish whether the necessary legal foundations exist or whether the law needs to be adapted by the relevant level of government. This applies, for example, to the exchange of data, which must be regulated in the applicable acts and ordinances, in particular with regard to personal data. 3.1 Measures for the objective "Empowerment" In order to strengthen Switzerland's ability to protect itself against cyberthreats, measures will be taken in the areas of education, research and innovation, in awareness raising, in assessing the threat situation and in expanding capabilities for analysing dependencies and risks. M1 Cybersecurity education, research and innovation Description To protect itself from cyberthreats, Switzerland needs sufficient specialised personnel. At the same time, steps must be taken to ensure that the population has the basic skills needed to use digital technologies and services. The corresponding capabilities are to be built up, imparted and further developed on an interdisciplinary basis through the existing educational and research institutions. However, education, research and innovation are not only needed to strengthen protection against cyberthreats; they will also contribute directly to Switzerland's success as a business location. Switzerland wants to use its solid position as a neutral country with a high standard of education and a strong innovation system to become one of the world's leading locations for cybersecurity services and products. Background and need for action Overview of measure Switzerland is home to a high-performance network of educational and research institutions. Various training opportunities related to cyber-risks have been developed in recent years. However, the economy's high demand for cybersecurity professionals cannot yet be adequately met, and cybersecurity skills are not yet taught systematically across all levels of education (compulsory schooling, uppersecondary and tertiary levels, and continuing education and training). A sizeable cybersecurity start-up scene has developed in Switzerland in recent years and a number of major players have opened branches in the country. However, a comparison with internationally leading regions and with Switzerland's innovation capacity in other areas makes it clear that the conditions for cybersecurity innovation need to be further enhanced. 13