SwitzerlandSecurity Measures of Internet Access Providers
Verordnung vom 9. März 2007 über Fernmeldedienste (FDV), SR 784.101.1, Art. 96a to 96c
In force since .
A sector security regimes rule binding private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Security
As of .
What it requires
- Applies to providers of internet access. Reached by declaring that you provide telecom services.
- Prevent outgoing connections with forged addressing elements by suitable technical means, in order to counter distributed denial-of-service attacks (Article 96a(2)).
- Where you supply telecommunications installations to customers, configure their security properties according to the recognised rules of technology (Article 96a(3)).
- While you keep technical control over those installations, update their security properties without delay and replace installations that can no longer be updated where a security risk results (Article 96a(3)(a) and (b)).
- Operate a reporting point that receives reports of unauthorised manipulation of telecommunications installations, and initiate suitable countermeasures within a reasonable time (Article 96b).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The Federal Office of Communications (BAKOM), in cooperation with the Federal Office for Cybersecurity, which Article 96c FDV charges with enforcing these provisions.
Settledness
- As of
What this law does
Article 96a(2) FDV requires internet access providers to prevent outgoing connections with forged addressing elements by suitable technical means, in order to counter distributed denial-of-service attacks. Article 96a(3) FDV requires an internet access provider that supplies telecommunications installations to customers to configure their security properties according to the recognised rules of technology.
Article 96a(3) FDV requires the provider, while it keeps technical control over those installations, to update their security properties without delay and to replace installations that can no longer be updated where a security risk results. Article 96b FDV requires internet access providers to operate a reporting point that receives reports of unauthorised manipulation of telecommunications installations and to initiate suitable countermeasures within a reasonable time.
The Federal Office of Communications enforces these provisions in cooperation with the Federal Office for Cybersecurity. The section containing Articles 96a to 96c was inserted with effect from . Article 60 of the Telecommunications Act allows an undertaking that breaches applicable law to be charged an amount of up to 10 percent of the turnover achieved in Switzerland, averaged over the last three financial years.
When LexLint raises it
When your app profile says your app provides telecom services.