National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Implementation projects 1. Overview of existing operational SOCs and CERTs, incl. contacts Project description Creation of an updated overview of existing operational SOCs and CERTs, as well as the corresponding contacts. Responsibility Cyber Security Competence Centre Milestones Q4/2019: Survey of the existing operational SOCs and CERTs, including contacts, carried out and documented Q4/2020: Process and responsibility for the ongoing updating of the overview clarified 2. Exchange of information with CERTs and SOCs Project description The need as to what information can be exchanged between CERTs and SOCs and how this exchange can be organised will be clarified. Responsibility Cyber Security Competence Centre Milestones Q2/2020: Analysis of the need for a systematic exchange of information and the possibilities for doing so Q3/2020: Projects for the establishment of the exchange of information defined and assigned Q4/2022: Defined projects implemented Processes and foundations for federal incident management (M15) Measure overview Measure objective In order to standardise incident management within the Federal Administration, a process will be developed to identify the reporting channels and responsibilities. Responsibility for the measure Cyber Security Competence Centre Participation All federal departments Existing Federal IT Security Committee (IT-SC) bodies/processes/concepts Need for legislation The existing basis is the Ordinance on Informatics and Telecommunications in the Federal Administration (FAITO). Adaptation to the Competence Centre is necessary. Measure implementation projects 1. Preparation of a cyber security ordinance 2. Preparation of a security incident management process for the Federal Administration 43/79