BCTF Agenda

Business Continuity Task Force Agenda
Location: Royal Olympic Hotel, Athens, Greece, June 5-6, 2025
Day 1 (June 5, 2025)
08:00 – 09:00
Registrations in the Hotel Lobby
09:00 – 11:00
Meeting Room - Olympia 1 + 2
Location - Underground (-1 Floor)
Keynote Session: How Resilient Telcos Leverage AI and Navigate New Markets to Create Value
Keynote 1: Welcome Speech - Wim De Meyer, ETIS Managing Director
Keynote 2: Building the Future: Collaboration and Innovation of Telecoms in a Transforming World - Pedro Gonçalves, ETIS Chairman & Senior Advisor for EU & International Digital Policy, MEO
Keynote 3: No Power, No Problem: How to Keep the Network Operational During Blackouts - Markus Lyyra & Ville Väre, Elisa DES
Keynote 4: Secure, Aware, Resilient: Driving a Strong Security Culture - Ulrich ten Eikelder, Business Resilience, Deutsche Telekom Security & Marcus Beyer, Security Awareness Officer, Swisscom
Keynote 5: Telco Security Landscape 2025 - Richard Kerkdijk, Senior Security Consultant, TNO
Keynote 6: TeBIT 2024 Benchmark report - AI Makes Telcos Smart. But Are Telcos Smart About AI? - Thomas "Tom" Kruger, Partner and Director, BCG
Keynote 7: How to Thrive in Unthinkable Times: Change Your RULEs - Andrew Collinson, MD, Connective Insight
Panel discussion
11:00 – 11:30
Coffee Break
BUSINESS CONTINUITY TASK FORCE MEETING
STARTS IN 4B ROOM
11:30 – 13:00
Meeting Room - Conf Room 4B
Location - 4th Floor
Session 1: Introductions, Ice-Breaker + Company Updates
Introduction 10'
Ice-breaker #1: Split up in pairs.
After 1 minute A introduces B to the group: who (name); where does the person work; background of expertise; something more personal.
Company Updates, 80'
Format: Presentations & Q&A
Moderator: Leila Mahlous, Proximus, Belgium
Goal: Each company is allocated 3 minutes to present recent challenges, threats, incidents, projects, and future plans. Also delivering expectations from this 2-day meeting. New members in the group receive a longer time slot, if requested.
Template to fill in will be circulated to all members in advance of the meeting. Updates to take place in the following order – 3 minutes each + Q&A!
- A1 Austria (First time participation)
- MEO (Formerly Altice Portugal)
- OTE
- Elisa
- LMT
- Slovak Telekom (First time participation)
- Swisscom
- Proximus
- KPN
- TET (First time participation)
13:00 – 14:00
Meeting Room - KALLIRHOE
Location - Ground Floor
Lunch Break
14:00 – 15:30
Meeting Room - Conf Room 4B
Location - 4th Floor
Session 2: “Service Continuity vs Business Continuity in Telecoms – Unpacking the Overlap and Gaps”
Format: Workshop in 2 groups
Moderator(s): Leila Mahlous, Proximus, Belgium & Jennifer Ebling, Swisscom
Theme: When it comes to planning, are we speaking the same language? This interactive session in 2 groups will explore the often-blurred lines between Service Continuity Plans (SCPs) and Business Continuity Plans (BCPs). What terminologies are we using, and do they align across the industry? What’s documented—and to what level of detail—when it comes to disaster recovery, operational resilience, and customer-facing service commitments?
Participants will showcase real-world templates, compare planning approaches, and highlight the gaps and overlaps in how continuity is understood and implemented. Whether you're focused on maintaining technical service uptime or ensuring organizational survivability, this session will spark practical insights into how we define, prepare for, and recover from disruption.
What do we want to compare:
15:30 – 16:00
Coffee Break
16:00 – 17:30
Meeting Room - Conf Room 4B
Location - 4th Floor
Session 3: “Communication Processes with all Employees in case of severe crises”
Format: Workshop in 3 groups including several complex scenarios
Moderator(s): Ricardo Carrapiço & João Gueifão, MEO, Portugal
Theme: “Crowdstrike-alike outages” - What is the most effective way to communicate the incident and its impacts quickly to the entire organization?
Ricardo and Joao from MEO in Portugal will compile 3 complex disruption/disaster scenarios for 3 different groups to discuss:
- How to effectively communicate with everyone during a cyber-attack - Ensuring acknowledgments are received from all parties?
- How to manage high demand and resource constraints during outages?
- How to communicate to the entire organization to stay home and avoid coming to telco buildings, or not turning on the laptop until further notice?
- How to ensure that all employees have processed the instructions provided?
Each group evaluates the best response strategy
At the end, we analyze if each member company's current preparedness is sufficient.
SCENARIOS
We propose to discuss 2 main types of communication:
1 – communication with all employees (generic guidelines)
2 – communication with Crisis response team and field force team
Scenario 1
Earthquake
- Considering an Earthquake hits a major city
Additional constraints to be evaluated by the group:
- The main building, usually used to manage crisis, get destroyed
- The incident occurs during the night
- Mobile communications are seriously impacted in that area
Scenario 2
Ransomware
- Considering a company gets attacked. A specific OS is targeted and network / IT servers get impacted but also employee’s laptops.
Additional constraints to be evaluated by the group:
- “Simple” situation – it occurs at normal working hours
- “More difficult” situation – it occurs during the night
Scenario 3
Blackout (no energy, national problem)
- “Simple” situation – it occurs at normal working hours
- “More difficult” situation – it occurs during the night
18:15 – 20:00
Sightseeing activity – Meeting point: Lobby of the Royal Olympic
Hotel
Itinerary: Olympieio, Hadrian's Arch, New Acropolis museum, The Acropolis - Parthenon, Areopagus (Areios Pagos), Ancient Agora, Plaka, Monastiraki.
20:00 – 22:00
Community Dinner - Rooftop restaurant,
Hotel Royal Olympic (Maps Link)


Business Continuity Task Force Agenda
Location: Royal Olympic Hotel, Athens, Greece, June 5-6, 2025
Day 2 (June 6, 2025)
09:00 – 10:30
Meeting Room - Olympia 2
Location - Underground (-1 Floor)
Session 4 (TELCO-ONLY): "Building Resilience in the Telecom Industry"
Joint Session with the Information Security Working Group
Moderator: Andrija Višić, ETIS Central Office + ETIS ISWG core-team
Presentation: A Closer Look at Liminal Panda, by Alexandre De Oliveira, POST Luxembourg, 15’ + Q&A
Roundtable Discussions: 15'
- Implications of Salt Typhoon
- Discuss the Data Leak Incident of SK Telecom - server was infected with malware, resulting in the need of 25 million SIM card replacements
- Experiences with hybrid war activities, sabotage-activities and ways to signal these
Short live-survey: "Telecom Infrastructure Resilience and Preparedness: Energy Backup, Service Continuity, and Crisis Collaboration", 40' (including Q&A)
- Participants fill in a short survey on the spot; results are shown in real-time; then a discussion starts after each answer
Presentation: "No power, no panic: How to prepare for grid disconnections", Elisa colleagues, 10' + Q&A
Presentation: “ETIS as a European Telco ISAC – update”, Andrija Višić, ETIS CO, 5’
11:00 – 11:30
Coffee Break
11:00 – 12:30
Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space
Session 5: "Telecom Resilience in the Face of Blackouts: Lessons from the 2025 Iberian Crisis”
Format: Presentation by MEO colleagues followed by a moderated discussion
Moderator(s): Ricardo Carrapiço & João Gueifão, MEO, Portugal
Theme: How telcos can better prepare for an outage similar to the 28 April 2025 one, that affected the Iberian peninsula countries and parts of southern France.
Crisis Response & Preparedness:
- What strategies worked effectively, and what challenges emerged in telecom’s response in Portugal (and Spain).
Interdependencies & Collaboration:
- How strong was the collaboration between telecoms, energy providers, and regulators? What role did these partnerships play during the crisis?
Data Management & Transparency:
- How was critical data handled and shared during the blackout?
- What improvements are needed for real-time information flow?
Power Outage Preparedness:
- How are telecoms currently prepared for extended power outages (12+ hours)? What specific measures are in place to maintain service continuity?
Comprehensive Business Continuity:
- How were internal and external communications managed during the outage? How did remote employees contribute to crisis management in real time? (added value)
Lessons Learned & Future Dilemmas:
- What are the biggest dilemmas faced during such events, and how can they be mitigated? What are the lessons learned?
Operational Challenges During Outages:
- How were logistical challenges handled, such as refuelling power generators amidst traffic chaos?
National Roaming & Regulatory Demands:
How did the outage revive discussions around National Roaming in Portugal? What are the regulator's expectations moving forward?
12:30 – 13:30
Meeting Room - KALLIRHOE
Location - Ground Floor
Lunch Break
13:30 – 14:30
Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space
Session 6: "Harmonising Continuity Practices Across the Telecom Supply Landscape"
Format: Workshop in 2 groups
Moderator(s): Leila Mahlous, Proximus, Belgium & Ricardo Carrapiço & João Gueifão, MEO, Portugal
Theme: This workshop dives into how telcos are managing their extended supply chains—contractors, subcontractors, and critical third parties—when it comes to business continuity and disaster recovery. Join us to share experiences, compare approaches to supplier oversight, audits, and contract design, and explore how aligned (or fragmented) current practices are across the industry.
Questions used in the workshop
- How do you manage BC expectations and responsibilities across your telecom supply chain, including contractors and subcontractors?
- What audits or assessments do you require from suppliers regarding continuity and DR readiness?
- How do you ensure subcontractors meet the same continuity and security standards as your direct contractors?
- How are BC and security controls integrated into supplier contracts—how consistent or harmonised are these across jurisdictions?
- What types of security and continuity clauses are becoming standard in telecom supply contracts in Europe?
14:30 – 15:30
Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space
Session 7: "Compliance and Regulatory Adaptation"
Format: Roundtable Discussion
Moderator(s): Leila Mahlous, Proximus, Belgium
Theme: Ensuring Compliance with NIS2, DORA, AI Act, CRA, etc.
e.g.: The requests from financial entities to comply with their contracts (DORA) increase the workload. How are organizations preparing for this?
15:30 – 16:00
Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space
Closing Session
A short session dedicated to follow-ups and discussing topics that arose during the meeting’s discussions. Participants will brainstorm and compile a list of future topics for consideration in upcoming ETIS events.
Before leaving, participants are kindly requested to fill out the Feedback Form.
16:00 – 17:00
Farewell Reception for all attendees in the Foyer
Event Context and Expectations
This workshop is a collaborative knowledge-sharing event, where success relies on active preparation and engagement from all participants.
- Participants are invited to prepare a 15-20 min presentation relevant to one of the main sessions (ideally addressing one or more of the suggested topics within that session).
- Topic selection confirmation with the organizer by May 5th and final presentation submission by May 28th.
- Meeting is held under Chatham House Rules, following ETIS confidentiality and anti-trust policy.
Event Sponsorship and Participation
This event is fully sponsored by ETIS and its partners and sponsors, covering all meals, coffee breaks, the guided tour, and the farewell reception. Participation is free of charge.
Participation is open exclusively to ETIS member companies, and attendees are expected to actively contribute to discussions and presentations.
Registration and Support
If you have not yet registered for the event, or if other colleagues from your organization wish to register, please visit the website: HERE
For any questions, requests, or support, please do not hesitate to reach out to the organizer.
ETIS Central Office contact:
Andrija Višić
av@etis.org / +324 95 26 25 26 (Signal)
Hotel Layout
