National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Existing Existing closed client base of MELANI bodies/processes/concepts Need for legislation Measure implementation projects MELANI is based on the legal basis in Article 6 of the Intelligence Service Act (IntelSA) for the early warning of critical infrastructures and in the Ordinance on Informatics and Telecommunications in the Federal Administration (FAITO). A legal basis that goes beyond the task of early warning must be created for the expansion of MELANI. 1. Targeted expansion of the closed client base 2. Development and expansion of services and products 3. Expansion of the existing exchange platform Implementation projects 1. Targeted expansion of the closed client base Project description Definition of needs-based access to MELANI products and information for all critical sectors and their specialist offices Responsibility Cyber Security Competence Centre including the FIS Milestones Q4/2019: Situation analysis on the use of MELANI by the various critical sectors prepared Q4/2020: Concept for the design of MELANI's client base created Q1/2021: Client base expanded in a targeted manner 2. Development and expansion of services and products Project description Expansion of MELANI products and services to support members of the closed client base regarding incident management, detection, analysis and monitoring. Responsibility Cyber Security Competence Centre including the FIS Milestones Q3/2020: Analysis of the existing MELANI products and services, as well as the existing requirements Q4/2020: MELANI product and service portfolio with roadmap created Q4/2021: First brief report on portfolio expansion according to roadmap Q4/2022: Second brief report on portfolio expansion according to roadmap 39/79