Key facts
In light of the increasing threat situation – especially in the areas of cybersecurity and disinformation – the Federal Council decided to strengthen Switzerland’s security structures. Since 2024, three new organisational units have been added to the Federal Department of Defence, Civil Protection and Sport (DDPS): the State Secretariat for Security Policy (SEPOS), the National Cyber Security Centre (NCSC) and the Armed Forces Cyber Command (SFCC). SEPOS has been active since January 2024. Within SEPOS, the Federal Information Security Unit was created, to implement key provisions of the Federal Act on Information Security (ISA). Following a transition period, this unit took over individual tasks of the NCSC in July 2025. The Federal Information Security Unit is responsible for the information security of the Confederation, and also the cantons in cases where they process classified federal information or access federal information sources.
The Swiss Federal Audit Office (SFAO) examined whether the Federal Information Security Unit is able to perform its statutory mandate in the new organisational structure. It focused in particular on whether the specialist office for monitoring the Federal Administration’s information security has sufficient staff and the necessary specialist skills.