National strategy for the protection of Switzerland against cyber risks – NCS implementation plan Crisis management Cyber incidents can have serious consequences and escalate to the point where crisis management becomes necessary at national level. An up-to-date, uniform and comprehensive picture of the situation is crucial for handling crises, as are the definition of efficient decision-making processes and a communication strategy. Crisis management is generally scenario-independent. This means that the general crisis management procedures and processes of the cantons and the Confederation are also valid for crises with cyber aspects. In such crises, however, it is important for the crisis teams to be supported by specialist knowledge and intensive cooperation among all competent federal, cantonal and private sector bodies. Because no time can be lost in managing crises, the processes must be rehearsed in advance, and concepts for leadership and communication must be developed. The competent cyber security offices must be directly involved in crisis management at federal level, which is carried out by existing or ad hoc crisis teams. Figure 10 Crisis management roadmap Integration of competent cyber security offices into federal crisis teams (M16) Measure overview Measure objective The existing crisis teams (particularly the Federal Civil Protection Crisis Management Board and the FONES crisis team) are used to deal with cyber crises, or ad hoc crisis teams are formed. In addition, sector-specific crisis organisations must be set up and used to deal with crises together with the business community. The competent cyber security offices must be networked with the crisis teams, and they must have the skills to take on specialist coordination in a crisis with cyber aspects. Responsibility for the measure Cyber Security Competence Centre Participation FOCP, FCh, FONES, GS-DDPS, FIS Existing Concept for management procedures and processes in the bodies/processes/concepts case of crises with cyber aspects Measure implementation projects 1. Definition of the role of the Cyber Security Competence Centre in federal crisis teams 2. Expansion of the cyber glossary 45/79