Cyber attacks
Towards a new reporting obligation
Célian Hirsch
— 5 December 2022
Since September 1, 2020, banks have had to notify FINMA within 24 hours of successful cyber attacks. On December 2, 2022, the Federal Council proposed to Parliament the introduction of a new obligation to report cyberattacks, also within 24 hours, but this time to the Swiss National Center for Cybersecurity (NCSC; cf. art. 74a ff of the draft Information Security Act [P-LSI]). Why this additional obligation? Because it will apply to all critical infrastructures, including banks, insurance companies, financial market[...]