National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Existing bodies/processes/concepts • • Measure implementation projects The processes for establishing the threat situation, the organisational processes, the management pace and the responsibilities between MELANI FITSU/GovCert, MELANI OIC and Cyber FIS have been recorded within the framework of NCS 1, and where necessary supplemented, tested and implemented. Cooperation with national and international partners. 1. Identification of target groups and their needs 2. Definition of product catalogue per target group 3. Identification/establishment of sources and production Implementation projects 1. Identification of target groups and their needs Project description Identification of already portrayed needs (situation pictures available) and definition of target groups. Analysis of their needs with regard to the content and type of communication on the cyber threat situation (timeliness, short and long term, operational or strategic). Responsibility FIS (MELANI OIC) in cooperation with representatives from the business community, society, cantons, Confederation (criminal prosecution authorities, Armed Forces, FONES/FOCP) Milestones Q4/2019: Extended target groups and their needs identified Q2/2020: Communication channels for the respective target groups identified (national contact point, Alertswiss, situation radar, quarterlies, cyber security group bulletins, etc.) 2. Definition of product catalogue per target group (service catalogue) Project description The format, frequency and contents of the products for the various target groups are defined. In this context, the task boundaries between the Confederation and the business community (providers of commercial services in the area of threat situations) must likewise be set in accordance with the principle of subsidiarity. Responsibility FIS (MELANI OIC) in cooperation with representatives from the business community, society, cantons (criminal prosecution authorities), and the Confederation (criminal prosecution authorities, Armed Forces, FONES/FOCP) Milestones Q1/2020: Area of responsibility clarified between the Confederation and business community Q2/2020: Service catalogue per target group defined 22/79