National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Resilience management Measures to reduce the ICT vulnerabilities of critical infrastructures are of great importance for the protection of Switzerland against cyber risks. These measures relate not only to strengthening prevention, but also include measures to contain damage and reduce downtime in the event of incidents. The implementation of measures to improve ICT resilience is carried out by the respective organisations and companies. The Confederation plays an active role in defining measures to improve ICT resilience in the critical sub-sectors and also monitors their implementation. The Confederation and the cantons are themselves responsible for implementing measures to protect their own critical ICT infrastructures. The measures identified to improve ICT resilience in the critical sub-sectors and administrations are to be implemented, coordinated with each other and further developed on the basis of periodically updated risk and vulnerability analyses. Figure 7 Resilience management roadmap Improvement of the ICT resilience of critical infrastructures (M5) Measure overview Measure objective The focus is on implementing measures to improve the ICT resilience of the critical sub-sectors, involving the relevant regulatory authorities and specialist offices. This is based on the existing risk and vulnerability analyses and the measure proposals derived from them. Aside from the implementation of the identified measures, the analyses and measures must be updated regularly and, where necessary, adapted to new findings and developments. Responsibility for the measure FOCP in cooperation with the specialist offices in regulated sectors Participation Specialist offices (OFCOM, FOPH, FOT, FOCA, SFOE), FONES, Cyber Security Competence Centre Participation of third parties Regulators, business associations, CI operators 24/79