ENISA Telecom and Digital Infrastructure Security Forum 2026

On 20 March, ENISA is organising the 2026 ENISA Telecom and Digital Infrastructure Security Forum in Paphos, Cyprus, co-organised with the Cyprus Presidency of the Council of the EU.

The forum brings together EU telecom authorities, 5G experts from the NIS Cooperation Group, industry specialists, and the wider cybersecurity community for open strategic and technical discussions in a private setting (no streaming, no recording).

Key topics

1. Cyber-attacks on the telecom networks
2. Resilience of the networks, focusing on power supply dependencies
3. New telecom networks, new technologies 
4. EU policy changes and challenges for the sector

Join us in Paphos to discuss pressing telecom security topics with policymakers, telecom regulators, and experts from across the sector.

Background

In 2009, Article 13a was introduced in the EU Framework directive, containing security and incident reporting requirements for the EU telecom sector. Since 2010 ENISA collaborated closely with national authorities across the EU, to agree on a common, harmonized approach to security measures and incident reporting. This collaboration took place within an informal group of authorities, set up by and supported by ENISA, under the auspices of the European Commission, called the ENISA Article 13a expert group. In 2016 the NIS1 directive followed this Article 13a approach, introducing security and incident reporting requirements for additional critical sectors, such energy, finance, transport, and health. In 2018 the Framework directive was replaced by the European Electronic Communications Code (EECC) and the Article 13a group was renamed to the ENISA ECASEC expert group.
The ECASEC group exchanges good practices about national supervision approaches. The group developed an EU telecom security measures framework, an EU telecom security incident reporting framework, and a tool for incident reporting called CIRAS, which is now used for NIS directive incident reporting. The ECASEC group meets three times per year, is chaired by EU Member States on a rotating basis and is currently chaired by: Ahmet Yesilyurt (Germany), Željka Kardum Ban (Croatia), Vassilis Stathopoulos (Greece).
In 2022 the NIS2 was adopted, which updated the NIS1, and also covered the telecom sector, subsuming the security and incident reporting of the EECC, replacing them with Articles 21 and 23 of the NIS2. Following this transition, in 2025 the ECASEC group was integrated into the NIS Cooperation group, a formal network of EU Member States group about strategic cybersecurity issues, as a subgroup of the NISCG workstream on Telecoms/5G cybersecurity. While the ECASEC subgroup is composed of mostly national regulatory authorities (NRAs), and focusing on technical cybersecurity issues for the telecom sector, the NISCG workstream on 5G/Telecoms Cybersecurity is composed of mostly national cybersecurity agencies, and addresses strategic cybersecurity issues for the telecom sector, producing deliverables such as the EU 5G toolbox, and the risk assessment of Europe’s networks and communication infrastructure, following the joint call by ministers attending the TTC council in Nevers, France.

The forum is a continuation of a series of meetings, previously called ENISA Article 13a Open Day. 

This is the 6th edition of the ENISA Telecom Security Forum. Please check the following links for the events of the previous years:

2021 – Athens: ENISA Telecom Security Forum — ENISA

2022 – Brussels: ENISA Telecom Security Forum — ENISA (europa.eu)

2023 – Lisbon: 3rd ENISA Telecom & Digital Infrastructure Security Forum — ENISA

2024 – Helsinki: ENISA Telecom & Digital Infrastructure Security Forum 2024 — ENISA

2025 – Amsterdam: ENISA Telecom & Digital Infrastructure Security Forum 2025 - ENISA