SWISS CRITICAL SECTOR FACES NEW 24-HOUR CYBERATTACK REPORTING RULE

Summary from the TLDR InfoSec newsletter

Switzerland's NCSC has announced a new rule that requires critical infrastructure organizations to report cyberattacks within 24 hours of discovering them. Cyberattacks include any actions that jeopardize the operation of critical infrastructure, such as manipulation, encryption, or data exfiltration; malware installed on systems; unauthorized access to systems; and extortion, threats, or coercion. This new requirement will take effect on April 1, with a grace period until October.