the operators and regulatory authorities. For crises, the corresponding plans are to be drawn up in close coordination with the authorities and private sector representatives, and agreements made where necessary. This is done in cooperation and consultation with federal risk management and the national strategy for the protection of critical infrastructure. Alone or in cooperation with partners from abroad, Switzerland should be in a position to actively identify and ward off attacks which affect or could affect Swiss interests, and thus support reactive crisis management. The responsible units are empowered to conduct targeted operations to obtain information on attack infrastructure. This should be provided for in the relevant legislation (e.g. Intelligence Service Act) and submitted to the political decision-makers. Measures Measure 12 Players from the private sector, society and authorities are to cooperate closely and use continuity management to strengthen and improve resilience to disruptions and incidents. (FDEA, FDF, DDPS, DETEC) Implementation Within the scope of the revision of the NESA, the FDEA is adapting its powers in order to be able to carry out needs-oriented risk and vulnerability analyses with all sub-sectors of the Federal Office for National Economic Supply (FONES), involving the competent authorities (primarily DETEC and FDF) depending on the situation. The results are to be incorporated in corresponding continuity and crisis management plans. If CI operators are not captured by the national economic supply system, they are to be contacted through the respective competent authorities, which will adapt their sector-specific legislation accordingly if necessary. MELANI supports and reinforces the voluntary exchange of information with CI operators, ICT service providers and system suppliers in support of continuity and resilience on the basis of self-help. This leads to an increased need for forensic capabilities, a greater flow of information and the strengthening of the exchange of information with CI operators and the private sector. Additional capabilities and capacities are created by means of systematic cooperation with relevant ICT service providers and system suppliers. Measure 13 In a crisis, activities should be coordinated primarily by MELANI with the players directly affected. The decision-making processes within the existing crisis and continuity management structures should be supported with specialist expertise in order to ensure a coherent approach to managing the crisis. The legality of prosecution has to be taken into account in the process. The national and international exchange of information plays a key role in crisis management and must thus be ensured and coordinated. (FDEA, FDF, DDPS, FDJP) Implementation To support the affected players in a crisis, MELANI supports and boosts the voluntary exchange of information with CI operators and its international partners, and ensures the 39/42

Select target paragraph3