What is the Swiss IKT Minimalstandard, and who is it for?

The IKT Minimalstandard ("ICT minimum standard") is the Swiss federal government's baseline cybersecurity standard, primarily aimed at operators of critical infrastructure — and it is built directly on the NIST CSF.

Published by the Bundesamt für wirtschaftliche Landesversorgung (BWL/FONES) — the federal office for national economic supply — because failures in critical sectors (energy, water, food, transport, …) threaten the country's supply security.

Key facts:

• Recommendation for most companies, but sector regulators can make it (or sector-specific versions of it) binding for critical-infrastructure operators
• Adopts the NIST CSF's five functions, in German: Identifizieren, Schützen, Detektieren, Reagieren, Wiederherstellen
• Concretizes them into 106 measures (Massnahmen) with a self-assessment scheme

Tip: "Minimal" is literal — it defines the floor every operator should reach, not best-in-class security. Think of it as the Swiss, sector-neutral on-ramp to the NIST CSF.

Go deeper:

• IKT-Minimalstandard — offizielle BACS/NCSC-Seite — Offizielle Bundesquelle: Standard-PDF, Excel-Bewertungstool und branchenspezifische Versionen.