Reporting cyberattacks on critical infrastructure mandatory from 1 April 2025
On 7 March, the Federal Council introduced a reporting obligation for cyberattacks on critical infrastructure, which will come into force on 1 April. Operators of critical infrastructure will be required to report cyberattacks to the National Cyber Security Centre (NCSC) within 24 hours of discovery. After submitting the initial report within 24 hours of discovering the incident, they have 14 days to complete their report. Further Information
Cyber Security Hub
The Cyber Security Hub (CSH) is an important information system of the National Cyber Security Centre (NCSC). It is used to share and manage information on cyberthreats, cyberincidents and cybersecurity practices. Further Information
02.12.2024 - The NCSC is currently receiving numerous reports of e-mails that claim to come from a debt collection agency or a health insurance company. They concern an alleged claim or reminder. Do not click on the link, as this is an attempt to distribute malware to Windows users.
Report cyberincidents to NCSC
The NCSC is grateful for reports of cyberincidents of any kind (phishing attempts, investment fraud, etc.) via the report form.
Overview of cyberthreats and how to protect yourself from them
The ‘Current threats’ section provides an overview of the most important cyberthreats, how to protect yourself from them and what to do if you are the victim of a cyberincident.
For many SMEs, cyberattacks are still an abstract and intangible danger. To make it easier for SMEs to get started with the topic of cybersecurity, the ITSec4KMU association is organising an awareness-raising event together with the National Cyber Security Centre Switzerland NCSC.