The OAG is the investigating and prosecuting authority of the Confederation. It is responsible for the prosecution of offences that are subject to federal jurisdiction (the vast majority of offences are subject to cantonal jurisdiction) and for international cooperation. Federal Data Protection and Information Commissioner (FDPIC) The FDPIC is a supervisory and consultation unit for federal bodies and private persons. The role consists primarily in explaining the Swiss Data Protection Act and its implementing ordinances. The commissioner advises on both legal issues and technical aspects of data protection. Special Task Force for Information Assurance (SONIA) The Special Task Force for Information Assurance is made up of decision-makers from both the administration and the private sector (CI operators). It is led by the Federal Delegate for IT Steering and convenes at the request of MELANI in the event of national crises in the area of information assurance. At present, SONIA is only partially operational, as the last exercise in 2005 showed that its structure, processes and organisation were not functional in practice. In a crisis, the designated members of its staff would already be engaged in overarching crisis management processes. Reporting and Analysis Centre for Information Assurance (MELANI) MELANI is a body that is managed jointly by the ISB (MELANI Steering and Government Computer Emergency Response Team, GovCERT 9) and the Federal Intelligence Service (Operations and Information Centre). MELANI provides subsidiary support for the information assurance of critical infrastructure by providing information on incidents and threats. It procures technical and non-technical information, evaluates it and forwards the relevant data to CI operators. In this way, MELANI assists in the risk management process within critical infrastructure, for instance by assessing situations and analysing the early recognition of attacks or incidents, evaluating their implications and if necessary examining malware. MELANI currently provides its services to a limited number of clients, consisting of selected companies that operate critical infrastructure for Switzerland (approximately 100 members such as banks, telecommunications companies and energy providers). Regarding the rest of the private sector and the population at large, MELANI offers support in the form of checklists, instructions and learning programmes. In the event of a crisis, MELANI is responsible for alerting and providing management support to the Special Task Force for Information Assurance (SONIA). However, the basic mandate of MELANI cannot be performed in full at the moment due to insufficient human resources. Federal Department of Justice and Police (FDJP) Federal Office of Police (fedpol) 9 CERT are organisations that are responsible for multi-case technical analyses. They collect and evaluate technical information within the overall context of a sequence of incidents. They also act as coordinators. At federal level, this organisation is called GovCERT, which also assumes a coordinating role in the event of international incidents. 15/42