How should it be reported?

Reporting form on the CSH

To make the reporting process as simple as possible, the reporting form will be available on the NCSC's Cyber Security Hub, which it already uses to exchange information with critical infrastructure operators. 

The NCSC reporting form allows for the quick collection of the necessary information and, if requested, forwarding to other authorities to which a reporting obligation also exists, for example to the Swiss Financial Market Supervisory Authority (FINMA) or the Federal Data Protection and Information Commissioner (FDPIC).

After submitting the initial report within 24 hours of discovering the incident, they have 14 days to complete their report.

Registering on the CSH

The NCSC recommends that organisations that do not yet have a login for the CSH register:

If organisations do not wish to register with the Cyber Security Hub, clicking on the 'Report' button on the NCSC home page will provide information on an alternative reporting option and an email template with questions.

Last modification 07.03.2025

Top of page

https://www.ncsc.admin.ch/content/ncsc/en/home/meldepflicht/meldepflicht-vorgehen.html