National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Existing bodies/processes/concepts • • • • • Measure implementation projects Risk and vulnerability analyses of the critical sub-sectors from the 2012-2017 NCS Implementation of the 2018-2022 national strategy for the protection of critical infrastructures (Updating of the) 2015 national risk analysis of disasters and emergencies in Switzerland Cooperation between the business community and authorities within the framework of national economic supply Sector-specific requirements 1. Implementation of planned or ongoing projects to boost resilience in the critical sub-sectors 2. Updating of risk and vulnerability analyses 3. Establishment of a cyber security academic working group Implementation projects 1. Implementation of planned or ongoing projects to boost resilience in the critical sub-sectors Project description Implementation of the measures planned in the framework of the 2012-2017 NCS and described in the measure reports in the critical sub-sectors. Responsibility Coordination, guidance and support of work by the FOCP, in regulated sectors in close cooperation with the specialist offices. The measures are implemented by business associations, specialist offices and companies. Milestones Q3/2019: Inventory of implemented and not yet implemented projects from the measure reports prepared Q4/2019: Implementation responsibilities clarified Q1/2020: Roadmap/plan for ongoing and upcoming measures drawn up Q4/2021: Coordination and information on the status and further implementation of measures with the involved persons responsible for implementation Q4/2022: Overview, progress report on implemented measures produced 2. Updating of risk and vulnerability analyses, as well as further development of the measures derived from them Project description Periodic updating and further development of specific resilience work, risk and vulnerability analyses, including proposed measures in the defined critical sub-sectors (industries). Responsibility and resources deployed FOCP in cooperation with FONES and the competent specialist offices, business associations and companies/organisations in the critical sub-sectors 25/79