National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Participation of third parties Regulators, business associations, and associations active in the field of cyber security (e.g. ICTswitzerland, Association suisse pour le label de cyber-sécurité, SIA), SATW (expertise contribution, awareness raising) and universities Existing bodies/processes/concepts • • • • Risk and vulnerability analyses from the 2012-2017 NCS Final report of the expert commission for the future of data processing and data security Existing cooperation between the business community and the Confederation within the framework of national economic supply Existing sectoral cooperation Need for legislation It has to be clarified in the sectors whether there is a need for legislation to introduce minimum standards for cyber security and, if so, what legislation. Measure implementation projects 1. Development and implementation of minimum standards to improve ICT resilience 2. Development and establishment of aids for SMEs Implementation projects 1. Development and implementation of minimum standards for ICT resilience Project description Based on the international NIST standard for cyber security, a minimum standard for ICT resilience was drawn up for Switzerland and aids for its implementation were developed. Sector-specific minimum ICT standards will be developed and introduced in cooperation with business associations based on the national economic supply minimum ICT standard. In sectors with existing ICT security regulations, these take precedence. Responsibility FONES in cooperation with specialist authorities, specialist offices (FOPH, OFCOM, FOT, FOCA, SFOE) and business associations; involvement of the competent specialist offices and regulators of critical sub-sectors, companies/organisations and universities Milestones Q2/2018: Publication of the minimum ICT standard and assessment aids Q2/2018: Minimum standard "Basic protection manual" of the Association of Swiss Electricity Companies Q1/2019: Water supply Q1/2019: Foodstuffs Q4/2019: Natural gas supply Q1/2020: Public transport Q4/2020: Telecommunications 32/79