Key Realities for Local Government
- Outsourcing Does Not Relieve Liability: Delegating IT to a local managed service provider does not absolve the municipal executive of political and statutory responsibility.
- Citizen Data Held Hostage: Inhabitant registers, tax files, and social assistance records are routinely published on extortion leak sites when ransom demands fail.
- Predictable Budgeting: Suisse Guard's flat fee of CHF 2,800 allows any municipality to obtain professional verification without fiscal strain.
| Step | Priority Action | Practical Benefit |
|---|---|---|
| 1 | Organization-wide MFA Enforcement | Neutralizes over 90% of account takeovers from compromised credentials. |
| 2 | Immutable Offline Backups | Guarantees complete recovery of municipal servers without paying ransoms. |
| 3 | External Threat Surface Audit | Pinpoints internet-exposed vulnerabilities before adversaries find them. |
| 4 | Anti-Fraud Employee Training | Prevents invoice redirection scams and malicious email compromise. |
| 5 | Incident Response & FOCS Protocol | Ensures compliance with the 24-hour reporting mandate under Art. 74b ISA. |
