the operators and regulatory authorities. For crises, the corresponding plans are to be drawn
up in close coordination with the authorities and private sector representatives, and
agreements made where necessary. This is done in cooperation and consultation with
federal risk management and the national strategy for the protection of critical infrastructure.
Alone or in cooperation with partners from abroad, Switzerland should be in a position to
actively identify and ward off attacks which affect or could affect Swiss interests, and thus
support reactive crisis management. The responsible units are empowered to conduct
targeted operations to obtain information on attack infrastructure. This should be provided for
in the relevant legislation (e.g. Intelligence Service Act) and submitted to the political
decision-makers.
Measures
Measure 12
Players from the private sector, society and authorities are to cooperate closely and use
continuity management to strengthen and improve resilience to disruptions and incidents.
(FDEA, FDF, DDPS, DETEC)
Implementation
Within the scope of the revision of the NESA, the FDEA is adapting its powers in order to be
able to carry out needs-oriented risk and vulnerability analyses with all sub-sectors of the
Federal Office for National Economic Supply (FONES), involving the competent authorities
(primarily DETEC and FDF) depending on the situation. The results are to be incorporated in
corresponding continuity and crisis management plans. If CI operators are not captured by
the national economic supply system, they are to be contacted through the respective
competent authorities, which will adapt their sector-specific legislation accordingly if
necessary.
MELANI supports and reinforces the voluntary exchange of information with CI operators,
ICT service providers and system suppliers in support of continuity and resilience on the
basis of self-help. This leads to an increased need for forensic capabilities, a greater flow of
information and the strengthening of the exchange of information with CI operators and the
private sector. Additional capabilities and capacities are created by means of systematic
cooperation with relevant ICT service providers and system suppliers.
Measure 13
In a crisis, activities should be coordinated primarily by MELANI with the players directly
affected. The decision-making processes within the existing crisis and continuity
management structures should be supported with specialist expertise in order to ensure a
coherent approach to managing the crisis. The legality of prosecution has to be taken into
account in the process. The national and international exchange of information plays a key
role in crisis management and must thus be ensured and coordinated. (FDEA, FDF, DDPS,
FDJP)
Implementation
To support the affected players in a crisis, MELANI supports and boosts the voluntary
exchange of information with CI operators and its international partners, and ensures the
39/42