Swiss Cyber Panic: Report Attacks in 24 Hours or Pay the Price!
Switzerland’s NCSC now demands a 24-hour cyberattack reporting sprint from critical infrastructure organizations. Whether it’s a data breach or a digital disaster, these groups must spill the cyber beans fast or face fines. This new policy aims to turbocharge cybersecurity and keep Swiss cheese holes out of their digital defenses.

Hot Take:
Ah, Switzerland! Known for its neutrality, cheese, and now, a blitzkrieg approach to cyberattack reporting. The Swiss NCSC is rolling out a new “report or regret” strategy, where critical infrastructure organizations must spill the beans on cyberattacks faster than you can say “yodelayheehoo!” With fines as high as the Alps for non-compliance, this is one Swiss watch you don’t want to miss ticking!
Key Points:
- Switzerland’s NCSC mandates reporting cyberattacks within 24 hours for critical infrastructure.
- The policy targets energy, water, transport, and local administrations.
- The Cybersecurity Ordinance becomes effective on April 1, 2025.
- Non-compliance fines can reach up to CHF 100,000 ($114,000).
- Organizations have a grace period until October 1, 2025, to comply.
Already a member? Log in here