{"id":46792,"date":"2026-11-04T23:00:00","date_gmt":"2026-11-04T22:00:00","guid":{"rendered":"https:\/\/www.efk.admin.ch\/?post_type=audit&p=46792"},"modified":"2026-11-04T23:00:04","modified_gmt":"2026-11-04T22:00:04","slug":"infrastructure-and-resources-for-reporting-operations","status":"publish","type":"audit","link":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/","title":{"rendered":"Infrastructure and resources for reporting operations"},"content":{"rendered":"\n

Effective since 1 April 2025, critical infrastructure operators must report cyberattacks to the National Cyber Security Centre (NCSC) within 24 hours. For this purpose, the NCSC uses the Cyber Security Hub (CSH) online platform, via which reportable incidents and up-to-date threat and vulnerability data can be exchanged.<\/p>\n\n\n\n

The Swiss Federal Audit Office (SFAO) conducted an audit to determine whether the NCSC has a robust cyber reporting platform, both technically and organisationally, and sufficient staffing to perform its statutory tasks in connection with the reporting obligation. It concluded that CSH enables efficient report processing and that the staffing of the incident management team is sufficient.<\/p>\n\n\n\n

\n
\n\n
\n
\n

222<\/h2>\n

Reports in the first year of mandatory reporting (April to December 2025)<\/p>\n<\/div>\n <\/div>\n

\n

< 1 h<\/h2>\n

Average report processing time<\/p>\n<\/div>\n <\/div>\n

\n

12<\/h2>\n

Employees in incident management (GovCERT)<\/p>\n<\/div>\n <\/div>\n

\n

~ 5300<\/h2>\n

registered users of the Cyber Security Hub (CSH)<\/p>\n<\/div>\n <\/div>\n <\/div>\n \n <\/div>\n<\/section>\n\n\n\n\n

\n
\n\n

\n Main conclusions <\/h2>\n \n
\n
    \n
  • \n
    \n

    Adequate resilience of the CSH<\/h3>\n

    After several outages in 2025, the NCSC migrated the CSH to a new service provider. The new infrastructure has improved availability, but a definitive assessment is not yet possible.<\/p>\n<\/div>\n <\/div>\n <\/li>\n

  • \n
    \n

    Established security processes<\/h3>\n

    Regular penetration tests and code reviews contribute to an appropriate level of security. The NCSC has reduced security risks by automating the management of software components.<\/p>\n<\/div>\n <\/div>\n <\/li>\n

  • \n
    \n

    Lack of redundancy in authentication<\/h3>\n

    Identity and access management remains a potential single point of failure. Plans are in place to integrate additional identity providers.<\/p>\n<\/div>\n <\/div>\n <\/li>\n <\/ul>\n

      \n
    • \n
      \n

      Appropriate technical and organisational security measures<\/h3>\n

      Access controls and communication security are implemented appropriately and meet the statutory requirements.<\/p>\n<\/div>\n <\/div>\n <\/li>\n

    • \n
      \n

      Sufficient staffing<\/h3>\n

      The staffing level and expertise are sufficient for the current reporting volume. Planned staffing increases will create additional capacity for future workload peaks.<\/p>\n<\/div>\n <\/div>\n <\/li>\n

    • \n
      \n

      Efficient processes and rapid initial handling<\/h3>\n

      The defined processes enable structured report processing. The NCSC carries out the initial handling of most incidents promptly.<\/p>\n<\/div>\n <\/div>\n <\/li>\n <\/ul>\n <\/div>\n \n <\/div>\n<\/section>\n","protected":false},"featured_media":0,"menu_order":0,"template":"","audit_category":[177],"audit_type":[51],"class_list":["post-46792","audit","type-audit","status-publish","hentry","audit_category-it-projects","audit_type-audit"],"acf":{"audit_lang":null,"audit_numbers":[{"audit_number":"26182"}],"audit_office":[32167],"audit_office_text":"","audit_date":"20261104","bgo":false,"keywords":"","audit_office_local":"NCSC"},"yoast_head":"\nInfrastructure and resources for reporting operations - Eidgen\u00f6ssische Finanzkontrolle (EFK)<\/title>\n<meta name=\"description\" content=\"Infrastructure and resources for reporting operations\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Infrastructure and resources for reporting operations\" \/>\n<meta property=\"og:description\" content=\"Infrastructure and resources for reporting operations\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/\" \/>\n<meta property=\"og:site_name\" content=\"Eidgen\u00f6ssische Finanzkontrolle (EFK)\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-04T22:00:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.efk.admin.ch\/wp-content\/uploads\/test\/palais.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/infrastructure-and-resources-for-reporting-operations\\\/\",\"url\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/infrastructure-and-resources-for-reporting-operations\\\/\",\"name\":\"Infrastructure and resources for reporting operations - Eidgen\u00f6ssische Finanzkontrolle (EFK)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#website\"},\"datePublished\":\"2026-11-04T22:00:00+00:00\",\"dateModified\":\"2026-11-04T22:00:04+00:00\",\"description\":\"Infrastructure and resources for reporting operations\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/infrastructure-and-resources-for-reporting-operations\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/infrastructure-and-resources-for-reporting-operations\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/infrastructure-and-resources-for-reporting-operations\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Report\",\"item\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/audit\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Infrastructure and resources for reporting operations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/\",\"name\":\"Informationen \u00fcber das oberste Finanzaufsichtsorgan der Schweiz\",\"description\":\"Die Eidgen\u00f6ssische Finanzkontrolle (EFK) ist das oberste Finanzaufsichtsorgan der Schweizerischen Eidgenossenschaft.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#organization\"},\"alternateName\":\"EFK\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#organization\",\"name\":\"Swiss Federal Audit Office (SFAO)\",\"alternateName\":\"EFK\",\"url\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.efk.admin.ch\\\/wp-content\\\/uploads\\\/efk_cdf_logo_ohne_claim.png\",\"contentUrl\":\"https:\\\/\\\/www.efk.admin.ch\\\/wp-content\\\/uploads\\\/efk_cdf_logo_ohne_claim.png\",\"width\":268,\"height\":258,\"caption\":\"Swiss Federal Audit Office (SFAO)\"},\"image\":{\"@id\":\"https:\\\/\\\/www.efk.admin.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.instagram.com\\\/efk_cdf_sfao\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCm-bXj227VE5sJzhB-ihdvw\\\/featured\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/11081578\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Infrastructure and resources for reporting operations - Eidgen\u00f6ssische Finanzkontrolle (EFK)","description":"Infrastructure and resources for reporting operations","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/","og_locale":"en_US","og_type":"article","og_title":"Infrastructure and resources for reporting operations","og_description":"Infrastructure and resources for reporting operations","og_url":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/","og_site_name":"Eidgen\u00f6ssische Finanzkontrolle (EFK)","article_modified_time":"2026-11-04T22:00:04+00:00","og_image":[{"width":750,"height":500,"url":"https:\/\/www.efk.admin.ch\/wp-content\/uploads\/test\/palais.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/","url":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/","name":"Infrastructure and resources for reporting operations - Eidgen\u00f6ssische Finanzkontrolle (EFK)","isPartOf":{"@id":"https:\/\/www.efk.admin.ch\/en\/#website"},"datePublished":"2026-11-04T22:00:00+00:00","dateModified":"2026-11-04T22:00:04+00:00","description":"Infrastructure and resources for reporting operations","breadcrumb":{"@id":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.efk.admin.ch\/en\/audit\/infrastructure-and-resources-for-reporting-operations\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.efk.admin.ch\/en\/"},{"@type":"ListItem","position":2,"name":"Report","item":"https:\/\/www.efk.admin.ch\/en\/audit\/"},{"@type":"ListItem","position":3,"name":"Infrastructure and resources for reporting operations"}]},{"@type":"WebSite","@id":"https:\/\/www.efk.admin.ch\/en\/#website","url":"https:\/\/www.efk.admin.ch\/en\/","name":"Informationen \u00fcber das oberste Finanzaufsichtsorgan der Schweiz","description":"Die Eidgen\u00f6ssische Finanzkontrolle (EFK) ist das oberste Finanzaufsichtsorgan der Schweizerischen Eidgenossenschaft.","publisher":{"@id":"https:\/\/www.efk.admin.ch\/en\/#organization"},"alternateName":"EFK","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.efk.admin.ch\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.efk.admin.ch\/en\/#organization","name":"Swiss Federal Audit Office (SFAO)","alternateName":"EFK","url":"https:\/\/www.efk.admin.ch\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.efk.admin.ch\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.efk.admin.ch\/wp-content\/uploads\/efk_cdf_logo_ohne_claim.png","contentUrl":"https:\/\/www.efk.admin.ch\/wp-content\/uploads\/efk_cdf_logo_ohne_claim.png","width":268,"height":258,"caption":"Swiss Federal Audit Office (SFAO)"},"image":{"@id":"https:\/\/www.efk.admin.ch\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/efk_cdf_sfao\/","https:\/\/www.youtube.com\/channel\/UCm-bXj227VE5sJzhB-ihdvw\/featured","https:\/\/www.linkedin.com\/company\/11081578\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/audit\/46792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/audit"}],"about":[{"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/types\/audit"}],"acf:post":[{"embeddable":true,"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/office\/32167"}],"wp:attachment":[{"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/media?parent=46792"}],"wp:term":[{"taxonomy":"audit_category","embeddable":true,"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/audit_category?post=46792"},{"taxonomy":"audit_type","embeddable":true,"href":"https:\/\/www.efk.admin.ch\/en\/wp-json\/wp\/v2\/audit_type?post=46792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}