# Le Conseil fédéral fait entrer en vigueur la LSI et le droit d'exécution au 1er janvier 2024

> The Federal Council sets 1 January 2024 as the date the Swiss Information Security Act (ISG) enters into force. The article explains the new ordinances and the ISMS duty for federal offices. Swiss GRC offers a platform and a webinar on ISMS setup.

- URL: https://swissgrc.com/fr/conseil-federal-lsi-droit-execution-vigueur-2024/
- Éditeur: SwissGRC®
- Publié: 2023-11-15
- Dernière mise à jour: 2023-11-15

## Points clés

- The Federal Council has set 1 January 2024 as the date on which the Information Security Act (ISG) enters into force.
- The ISG combines the central legal bases for the security of federal information and prescribes uniform minimum requirements for federal authorities and organizations based on international standards.
- The ISG extends the scope of protection to third parties, cantons and international partners entrusted with processing sensitive federal data.
- Three new ordinances apply: the Information Security Ordinance (ISV), the Ordinance on Personal Security Checks (VPSP) and the Ordinance on the Operational Security Procedure (VBSV). Another ordinance is partially revised.
- Federal offices are obliged to establish an information security management system (ISMS) as part of the ISG implementation.
- Swiss GRC offers a webinar on the practical implementation of an ISMS with the GRC Toolbox, held on 5.12.2023 from 10:00 to 10:45 am with CEO Besfort Kuqi. A recording is available in German.

**The Federal Council has set the date for the Information Security Act (ISG) to enter into force as January 1, 2024 ([press release](https://www.admin.ch/gov/de/start/dokumentation/medienmitteilungen/bundesrat.msg-id-98497.html)). This decision marks an important milestone in protecting information and strengthening cyber security in Switzerland. Find out more about the ISG in our [specialist article](https://swissgrc.com/blog/staerkung-der-digitalen-resilienz-das-informationssicherheitsgesetz-des-bundes-isg/)(in German).**

The ISG, which combines the central legal bases for the security of federal information, prescribes uniform minimum requirements for federal authorities and organizations based on international standards. It also extends the scope of protection to third parties, cantons and international partners entrusted with the processing of sensitive federal data.

The introduction of three new ordinances – the Information Security Ordinance (ISV), the Ordinance on Personal Security Checks (VPSP) and the Ordinance on the Operational Security Procedure (VBSV) – as well as a partial revision of another ordinance, will further specify the measures for ensuring information security. As part of the implementation of the ISG, federal offices are now obliged to establish an information security management system (ISMS) – a standard that stands for the systematic management and continuous improvement of information security.

As a solution provider in the area of Governance, Risk & Compliance (GRC), Swiss GRC contributes with its GRC platform to making it easier for authorities and organizations to set up and operate an ISMS and thus ensure ISG/ISV compliance.

Webinar: ISG: Practical implementation of an ISMS with the GRC Toolbox [Product demo]

Take part in our webinar « ISG: Practical implementation with the GRC Toolbox » on 5.12.2023 from 10:00 to 10:45 am. Learn from our expert and CEO, Besfort Kuqi, how you can set up an ISMS in accordance with the requirements of the new Swiss Information Security Act (ISG).

Watch the webinar recording now (in German)

## Questions fréquentes

### When does the Swiss Information Security Act (ISG) enter into force?

The Federal Council has set 1 January 2024 as the date on which the ISG enters into force.

### Which ordinances accompany the ISG?

Three new ordinances accompany the ISG: the Information Security Ordinance (ISV), the Ordinance on Personal Security Checks (VPSP) and the Ordinance on the Operational Security Procedure (VBSV). A further ordinance is partially revised.

### Do federal offices need an ISMS under the ISG?

Yes. As part of the ISG implementation, federal offices are obliged to establish an information security management system (ISMS). An ISMS stands for the systematic management and continuous improvement of information security.

### Who is covered by the ISG?

The ISG prescribes uniform minimum requirements for federal authorities and organizations. Its protection also covers third parties, cantons and international partners entrusted with processing sensitive federal data.

### How does Swiss GRC support ISG compliance?

Swiss GRC provides a GRC platform that makes it easier for authorities and organizations to set up and operate an ISMS and thus ensure ISG and ISV compliance. A webinar with a product demo shows the practical implementation with the GRC Toolbox.