National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Need for legislation Measure implementation projects The legal basis for the introduction of a reporting obligation must be drafted or revised if it does not already exist (e.g. Telecommunications Act). 1. Study on basic models for reporting obligations 2. Discussion on the principle with the business community and authorities Implementation projects 1. Study on basic models for reporting obligations Project description Development of basic principles by recording existing reporting obligations as well as development of basic models of reporting obligations for (cyber) security incidents Responsibility Cyber Security Competence Centre, FOCP, involvement of specialist offices and FINMA Milestones Q1/2019: Call for tenders for a basic study "Examination of a reporting obligation in the case of (cyber) security incidents" Q3/2019: Performance of the basic study "Examination of a reporting obligation in the case of (cyber) security incidents" Q4/2019: Reporting on basic models and recommendations for basic models 2. Discussion on the principle with the business community and authorities Project description Creation of a basis for decision-making by conducting a principle discussion on variants of "reporting obligations in the event of (cyber) security incidents" with the business community and authorities Responsibility Cyber Security Competence Centre, FOCP, involvement of specialist offices, FINMA and ICTswitzerland Milestones Q3/2019: Evaluation of models by business and political circles based on the results of the basic study Q4/2019: Reporting with recommendation on reporting obligation and further information to Parliament Global internet governance (M10) Measure overview Measure objective Switzerland should work actively and in a coordinated manner to advocate an international set of rules for the use and further development of the internet that is compatible with Switzerland's ideas of freedom, democracy and (personal) responsibility, basic supply, equal opportunities, security, human rights and the rule of law. In this respect, national stakeholders must be involved and informed of relevant developments. 34/79