M6: Resilience, standardisation and regulation

Projects

• M6-6.1: Swiss FS-CSC

  Description
  The Swiss FS-CSC association operates as a public-private partnership designed to enhance the financial sector's cyber resilience and strengthen collaboration between financial institutions and authorities on strategic and operational matters. Established in Zurich on 5 April 2022, the association now has over 170 members, including banks, reinsurance companies, the Swiss National Bank (SNB), SIX, securities firms, financial service providers, asset managers, financial institutions in Liechtenstein and industry associations. The Swiss Financial Market Supervisory Authority FINMA, the National Cyber Security Centre (NCSC) and the State Secretariat for International Finance (SIF) participate as affiliates in key committees.
  

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

  Information
  Swiss Financial Sector Cyber Security Centre FS-CSC
  

• M6-6.2: SWICYBA - Swiss Industry Cybersecurity Association

  Description
  Cybersecurity centre for Swiss industry.
  

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]
  

• M6-6.3: Rail ISAC

  Description
  Information-sharing and analysis centre in the rail mobility sector.
  

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

• M6-6.4: Healthcare-CSC

  Description
  The "Healthcare Cyber Security Center (H-CSC)" is a national cybersecurity organization. It serves as a platform for knowledge exchange and collaboration among healthcare facilities. Its goal is to build on existing capabilities and create synergies so that the prevention, detection, and mitigation of cyber incidents are strengthened in the long term.

  Responsiblity
  National Cyber Security Centre (NCSC)
  [e-mail]

  Information
  Healthcare Cyber Security Centre H-CSC

• M6-6.5: Cyber Security Forum: Industry and Trade

  Description
  The aim is to strengthen the exchange of information, promote a shared understanding of the threat landscape and enhance resilience within the Swiss food supply chain.

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

• M6-6.6: Development of frameworks, methods, and tools to help government agencies and businesses achieve cyber resilience

  Description
  Further development and application tools for the NIST standard.
  

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

• M6-6.7: Mandatory reporting of cyberattacks on critical infrastructures

  Description
  Reporting of cyberattacks on critical infrastructures has been mandatory in Switzerland since 1 April 2025. Operators of critical infrastructures are required to report cyberattacks to the NCSC within 24 hours of their discovery. The reporting obligation is regulated in the Information Security Act (ISA) (German, French and Italian) and the Cybersecurity Ordinance (CySO) (German, French and Italian).

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

  Information
  Reporting obligation

• M6-6.8: Cyber-Safe – Label

  Description
  Cyber-Safe.ch is a Swiss cybersecurity label that has been specially developed for small and medium-sized enterprises (SMEs) and public institutions such as local communes.
  

  Responsibility
  Association Swiss Cybersecurity Label
  [e-mail]

  Information
  cyber-safe.ch (German and French)

• M6-6.9: Resilience assessments (risk and vulnerability assessments) in sub-sectors

  Description
  Critical infrastructures should be regularly assessed to determine whether vulnerabilities and risks exist that could lead to significant disruptions or shutdowns, and whether additional measures are required to strengthen resilience.
  

  Responsibility
  Federal Office for Civil Protection (FOCP)
  [e-mail]

  Information
  Federal Office for Civil Protection (FOCP)
  

• M6-6.13: CyberSeal - Label

  Description
  Confirms that an IT service provider implements appropriate technical and organisational measures to guarantee its customers adequate protection against cyber risks. CyberSeal helps increase the cyber resilience of Swiss SMEs.
  

  Responsability
  Alliance Digital Security Switzerland ADSS

  Information
  Alliance Digital Security Switzerland ADSS

• M6-6.14: Cyber Community Management

  Description
  Cyber community management refers to the coordinated collaboration, support and knowledge-sharing between the BACS and stakeholders with a view to strengthening collective cyber resilience.

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]

• M6-6.14: Cyber Community Management

  Description
  The “Energy Cyber Security Centre (E-CSC)” is being established as a national cyber security organisation for the energy sector. The aim is to support energy supply companies with sector-specific cyber security services and to strengthen the cyber resilience of the energy sector in the long term.

  Responsibility
  National Cyber Security Centre (NCSC)
  [e-mail]