Message on mandatory reporting of cyber attacks on critical infrastructure
The Federal Council wants to introduce a reporting obligation for cyber attacks on critical infrastructures. A new dispatch on the amendment of the Federal Information Security Act was approved at the federal level.
A new chapter in cybersecurity has already begun with the start of Russia's war of aggression on Ukraine, Microsoft said in a November Blogpost writes. Since then, the Redmond company has also observed a sharp increase in cyberattacks. While the number of attacks on critical infrastructure accounted for 20 percent of all cyberattacks perpetrated by states in recent years, state-motivated attacks have recently increased by 40 percent, according to Microsoft. However, the report also notes that Russia is not the only country that is increasingly combining physical aggression with cyberwar. Countries such as Iran, North Korea and China are also mentioned.
Thanks to a new reporting obligation to the National Cyber Security Center, it should be possible to better assess threat situations in the future. During the consultation process for a draft law, the federal government received a total of around 99 Opinions from cantons, operators of critical infrastructures and representatives from research and industry. According to the federal government, there is currently no overview of which attacks have taken place where, as the reports to the NCSC have so far been made on a voluntary basis.
To make a critical infrastructure attack report as easy to handle as possible, the NCSC now wants to create a electronic reporting formVto make them available. Reports can thus be easily recorded and, if desired, transmitted directly to other agencies, as the federal government writes in a statement.
Source: Federal Council
