Computer security incident response teams: are they legally regulated? The Swiss example

Area of Science:

• Cybersecurity Law
• Information Security Governance

Background:

• Computer Security Incident Response Teams (CSIRTs) and Computer Emergency Response Teams (CERTs) are crucial for cyber incident management.
• Demand for CSIRTs is rising, especially within critical infrastructures.

Purpose of the Study:

• To analyze the regulation of CSIRT/CERT activities under Swiss law.
• To differentiate regulatory approaches for private versus governmental CSIRTs in Switzerland.

Main Methods:

• Legal analysis of Swiss legislation pertaining to cybersecurity and incident response.
• Comparative examination of regulatory frameworks for different types of CSIRTs.

Main Results:

• Swiss law does not uniformly regulate all CSIRTs.
• Governmental CSIRTs, like the Swiss GovCERT, face distinct regulatory scrutiny compared to private entities.

Conclusions:

• The current Swiss legal framework presents a nuanced approach to CSIRT regulation.
• Further clarification may be needed to ensure consistent oversight of cyber incident response capabilities.