Sphere of action 1 Research and development Sphere of action 2 Risk and vulnerability analysis Measures 1 New risks in connection with cyber crime are to be researched Measures 2 Independent evaluation of systems Risk analyses to minimise risks in collaboration with authorities, ICT service providers and system suppliers 3 Testing of ICT infrastructure for systemic, organisational and technical vulnerabilities Sphere of action 3 Analysis of the threat landscape Measures 4 Establishment of a picture of the situation and its development 5 Review of incidents for the further development of measures 6 Case overview and coordination of inter-cantonal clusters of cases Sphere of action 4 Competence building Measures 7 Establishment of an overview of the competence building offering and identification of gaps 8 Filling of gaps in competence building and increased use of high-quality offerings Sphere of action 5 International relations and initiatives Measures 9 Active participation of Switzerland in the area of Internet governance 10 Cooperation at the international security policy level 11 Coordination of those involved in initiatives and best practices relating to security and assurance processes Sphere of action 6 Continuity and crisis management Measures 12 Strengthening and improving resilience to disturbances and incidents 13 Coordination of activities, primarily with those directly involved, and support of decision-making processes with the relevant expertise 14 Active measures to identify the perpetrator and possible impairment of its infrastructure in the event of a specific threat 15 Establishment of a plan for management procedures and processes to ensure timely problem-solving Sphere of action 7 Legal foundations Measures 16 Evaluation of existing legislation on the basis of measures and implementation concepts and priorisation of immediate adjustment needs The designated federal agencies should implement the measures within the context of their existing mandate by the end of 2017. Partners from authorities, the private sector and society are to be involved in this implementation process. A coordination unit will verify implementation of the measures as well as the need for further provisions to minimise risk. This coordination unit should be established in a federal agency. 4/42