National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Threat situation An overview of the current threat situation is a core element of cyber risk protection. It is the basis for choosing and prioritising preventive and reactive measures and is indispensable for making the right decisions in the event of incidents and crisis situations. Switzerland remains dependent on having a holistic picture of the cyber situation to protect the country against cyber risks. In view of the intensified threat situation, existing capabilities must be expanded, and the exchange of information with the business community and the cantons must be further strengthened. Moreover, findings on the threat situation should no longer be made available only to the authorities and operators of critical infrastructures, but also in an appropriate form to other Swiss companies and the population. Figure 6 Threat situation roadmap Expansion of capabilities for assessing and presenting the cyber threat situation (M4) Measure overview Measure objective Switzerland has a holistic picture of the cyber situation to protect the country against cyber risks. • The threat situation is processed in a target-oriented manner and includes recipients at the technical and operational level, through to the politico-strategic level. • The systematic and sustainable processing and recording of cyber incidents is ensured by expanding the existing capacities. • The systematisation of OSINT in the cyber area is complete and provides the comprehensive information base needed from publicly accessible sources. • The situation assessments of criminal prosecution authorities, cyber security experts, the Armed Forces and the Intelligence Service are taken into account when assessing relevant threats. The exchange of information with the business community and the cantons is stronger. Findings on the threat situation are no longer made available only to the authorities and operators of critical infrastructures, but are also provided in an appropriate form to Swiss companies and the population. Responsibility for the measure FIS (MELANI OIC) Participation of federal units fedpol, OAG, Cyber Security Competence Centre (GovCert), AFCSO (MilCERT, CYD), FIS (Cyber FIS, NIC) Participation of third parties Cantons (particularly via the Cyberboard), partners from the business community (MELANI CC, SCE), academia (universities) and the cantons 21/79