Switzerland to Mandate 24-Hour Cyber Attack Reporting for Critical Infrastructure

Summary:

Starting next month, Switzerland’s National Cybersecurity Centre (NCSC) will require critical infrastructure organizations, including utilities, local governments, and transportation providers, to report cyberattacks within 24 hours of discovery. This mandate is part of an amendment to the Information Security Act (ISA), covering incidents such as data breaches, extortion attempts, and malware infections.

Comments:

Switzerland's new regulation reflects a growing trend toward timely cyberattack reporting, aiming to improve national cybersecurity and reduce the impact of incidents. The 24-hour window emphasizes the urgency of rapid response and highlights the need for proactive threat management in critical sectors.

Suggested Guidelines:

1. Implement Swift Incident Reporting: Develop protocols to quickly report cyber incidents in compliance with regulatory requirements.
2. Enhanced Monitoring: Ensure continuous network monitoring to detect attacks and minimize response time.
3. Employee Training: Train staff on early detection and reporting procedures for cyber incidents.
4. Collaborate with NCSC: Maintain communication with national cybersecurity bodies to ensure coordinated responses during incidents.

Tags:

#Switzerland #Cybersecurity #CyberAttack #IncidentReporting #NationalCybersecurityCentre #DataBreach #CyberRegulations

Reporting cyberattacks on critical infrastructure mandatory from 1 April 2025

07.03.2025 - At its meeting on 7 March, the Federal Council introduced a reporting obligation for cyberattacks on critical infrastructure, which will come into force on 1 April. Operators of critical infrastructure will be required to report cyberattacks to the National Cyber Security Centre (NCSC) within 24 hours of discovery. These reports will enable the NCSC to assist victims of cyberattacks and alert operators of critical infrastructure.

National Cyber Security Centre NCSCFederal Department of Defence, Civil Protection and Sport DDPS