NCSC Mandatory Cyber Reporting: Swiss ISA Enforcement 2026
Switzerland's ISA transitional period for mandatory cyber reporting ends mid-2026. Swiss operators must validate their NCSC 24-hour notification pipelines now.
Switzerland's ISA transitional period for mandatory cyber reporting ends mid-2026. Swiss operators must validate their NCSC 24-hour notification pipelines now.
Switzerland's KRITIS-G and the EU NIS2 revision advance in parallel. Swiss operators must navigate both legislative tracks to avoid compliance gaps by 2027.
The first mandatory TLPT cycles under DORA begin in 2026. Swiss banks and insurers with EU subsidiaries must prepare for TIBER-EU-aligned testing now.
The EU AI Act's August 2026 deadline for high-risk systems is 83 days away. Swiss operators face fines up to 7% for non-compliant AI exports.
The EU Digital Omnibus proposes one portal for NIS2, DORA, GDPR and CER notifications — but different thresholds and timelines remain unchanged. Swiss firms must plan accordingly.
Switzerland's Federal Council is drafting a new cyber products law by autumn 2026, mirroring the EU Cyber Resilience Act. What Swiss manufacturers, importers, and software vendors must prepare for now.
The EU Cyber Resilience Act's first mandatory deadline — vulnerability and incident reporting obligations — takes effect on 11 September 2026. Swiss manufacturers exporting digital products to the EU have five months to build compliant processes.
EU Digital Omnibus heads into trilogue: what Swiss compliance teams should do now on GDPR, AI Act, NIS2, and DORA before the final text lands.
On 19 November 2025, the European Commission published the Digital Omnibus.
The revised nDSG is now in force. Persistent blind spots: incomplete records of processing activities.