Reporting obligation review: NCSC records over 264 mandatory reports since April 2025
The National Cyber Security Centre reviews: over 264 mandatory reports and nearly 65,000 voluntary reports show the extent of the cyber threat in Switzerland.
NCSC reviews the reporting obligation
Since 1 April 2025, reporting cyber attacks on critical infrastructure has been mandatory in Switzerland. Almost a year later, the National Cyber Security Centre (NCSC) draws an initial review.
Key figures
- 264+ mandatory reports since April 2025
- 64,733 voluntary reports in 2025
- Since October 2025: fines up to CHF 100,000 for non-compliance
- NCSC budget 2026: increased to CHF 26.25 million
Recommendations for businesses
- Check whether your business is subject to the reporting obligation
- Establish a reporting process that meets the 24-hour deadline
- Document cyber incidents comprehensively
- Evaluate cyber insurance covering regulatory costs and fines
- Train employees to recognise reportable incidents