BCTF Agenda

Business Continuity Task Force Agenda
 Location: Royal Olympic Hotel, Athens, Greece, June 5-6, 2025

Day 1 (June 5, 2025)

08:00 – 09:00

Registrations in the Hotel Lobby

09:00 – 11:00

Meeting Room - Olympia 1 + 2
Location - Underground (-1 Floor)

Keynote Session: How Resilient Telcos Leverage AI and Navigate New Markets to Create Value

Keynote 1: Welcome Speech - Wim De Meyer, ETIS Managing Director

Keynote 2: Building the Future: Collaboration and Innovation of Telecoms in a Transforming World
- Pedro Gonçalves, ETIS Chairman & Senior Advisor for EU & International Digital Policy, MEO

Keynote 3: No Power, No Problem: How to Keep the Network Operational During Blackouts
- Markus Lyyra & Ville Väre, Elisa DES

Keynote 4: Secure, Aware, Resilient: Driving a Strong Security Culture - Ulrich ten Eikelder, Business Resilience, Deutsche Telekom Security & Marcus Beyer, Security Awareness Officer, Swisscom 

Keynote 5: Telco Security Landscape 2025
- Richard Kerkdijk, Senior Security Consultant, TNO

Keynote 6: TeBIT 2024 Benchmark report - AI Makes Telcos Smart. But Are Telcos Smart About AI?
- Thomas "Tom" Kruger, Partner and Director, BCG 

 

Keynote 7: How to Thrive in Unthinkable Times: Change Your RULEs - Andrew Collinson, MD, Connective Insight

 

Panel discussion

 

11:00 – 11:30

Coffee Break

BUSINESS CONTINUITY TASK FORCE MEETING

STARTS IN 4B ROOM

11:30 – 13:00

Meeting Room - Conf Room 4B

Location - 4th Floor

Session 1: Introductions, Ice-Breaker + Company Updates

Introduction 10'

 

Ice-breaker #1: Split up in pairs.

After 1 minute A introduces B to the group: who (name); where does the person work; background of expertise; something more personal.

 

Company Updates, 80'

 

Format: Presentations & Q&A

Moderator: Leila Mahlous, Proximus, Belgium

 

Goal: Each company is allocated 3 minutes to present recent challenges, threats, incidents, projects, and future plans. Also delivering expectations from this 2-day meeting. New members in the group receive a longer time slot, if requested.

 

Template to fill in will be circulated to all members in advance of the meeting. Updates to take place in the following order – 3 minutes each + Q&A!

 

  • A1 Austria (First time participation)
  • MEO (Formerly Altice Portugal)
  • OTE
  • Elisa
  • LMT
  • Slovak Telekom (First time participation)
  • Swisscom
  • Proximus
  • KPN
  • TET (First time participation)

 

13:00 – 14:00

Meeting Room - KALLIRHOE
Location - Ground Floor

Lunch Break

14:00 – 15:30

Meeting Room - Conf Room 4B

Location - 4th Floor

Session 2: “Service Continuity vs Business Continuity in Telecoms – Unpacking the Overlap and Gaps”

Format: Workshop in 2 groups

Moderator(s): Leila Mahlous, Proximus, Belgium & Jennifer Ebling, Swisscom

 

Theme: When it comes to planning, are we speaking the same language? This interactive session in 2 groups will explore the often-blurred lines between Service Continuity Plans (SCPs) and Business Continuity Plans (BCPs). What terminologies are we using, and do they align across the industry? What’s documented—and to what level of detail—when it comes to disaster recovery, operational resilience, and customer-facing service commitments?

 

Participants will showcase real-world templates, compare planning approaches, and highlight the gaps and overlaps in how continuity is understood and implemented. Whether you're focused on maintaining technical service uptime or ensuring organizational survivability, this session will spark practical insights into how we define, prepare for, and recover from disruption.

 

What do we want to compare:

 

Type of plans + terminology+level (strategic – Tactical- Operational)
Company BCP
Business unit BCP
Disaster Recovery Plan
Technical runbooks
Incident Playbooks
Crisis Management Plan etc.
Who is the owner of the document?
What is documented in each of the plans?
How to ensure consistency between the different plans? Complementary?
Calling list in the document or only Function & R&R in the plan but calling list are managed separately?
Still necessary to have call cascading defined?
• Link between BIAs, RAs and the different plans?
Maintenance? Frequency, requirements defined for that?
Challenges? overlapping topics?
Validation/sign off?

15:30 – 16:00

Coffee Break

16:00 – 17:30

Meeting Room - Conf Room 4B

Location - 4th Floor

Session 3: “Communication Processes with all Employees in case of severe crises”

Format: Workshop in 3 groups including several complex scenarios

Moderator(s): Ricardo Carrapiço & João Gueifão, MEO, Portugal

 

Theme: “Crowdstrike-alike outages” - What is the most effective way to communicate the incident and its impacts quickly to the entire organization?

 

Ricardo and Joao from MEO in Portugal will compile 3 complex disruption/disaster scenarios for 3 different groups to discuss:

  • How to effectively communicate with everyone during a cyber-attack - Ensuring acknowledgments are received from all parties?
  • How to manage high demand and resource constraints during outages?
  • How to communicate to the entire organization to stay home and avoid coming to telco buildings, or not turning on the laptop until further notice?
  • How to ensure that all employees have processed the instructions provided?

Each group evaluates the best response strategy

At the end, we analyze if each member company's current preparedness is sufficient.

 

SCENARIOS

 

We propose to discuss 2 main types of communication:

              1 – communication with all employees (generic guidelines)

              2 – communication with Crisis response team and field force team

 

Scenario 1

Earthquake

  • Considering an Earthquake hits a major city

Additional constraints to be evaluated by the group:

  • The main building, usually used to manage crisis, get destroyed
  • The incident occurs during the night
  • Mobile communications are seriously impacted in that area

 

Scenario 2

Ransomware

  • Considering a company gets attacked. A specific OS is targeted and network / IT servers get impacted but also employee’s laptops.

Additional constraints to be evaluated by the group:

  • “Simple” situation – it occurs at normal working hours
  • “More difficult” situation – it occurs during the night

 

Scenario 3

Blackout (no energy, national problem)

  • “Simple” situation – it occurs at normal working hours
  • “More difficult” situation – it occurs during the night

18:15 – 20:00

Sightseeing activity – Meeting point: Lobby of the Royal Olympic

Hotel 

Itinerary: Olympieio, Hadrian's Arch, New Acropolis museum, The Acropolis - Parthenon, Areopagus (Areios Pagos), Ancient Agora, Plaka, Monastiraki.

20:00 – 22:00

Community Dinner - Rooftop restaurant,
Hotel Royal Olympic (Maps Link)

Business Continuity Task Force Agenda
 Location: Royal Olympic Hotel, Athens, Greece, June 5-6, 2025

Day 2 (June 6, 2025)

09:00 – 10:30

Meeting Room - Olympia 2
Location - Underground (-1 Floor)

Session 4 (TELCO-ONLY): "Building Resilience in the Telecom Industry"

Joint Session with the Information Security Working Group

Moderator: Andrija Višić, ETIS Central Office + ETIS ISWG core-team

 

Presentation: A Closer Look at Liminal Panda, by Alexandre De Oliveira, POST Luxembourg, 15’ + Q&A

 

Roundtable Discussions: 15'

  • Implications of Salt Typhoon
  • Discuss the Data Leak Incident of SK Telecom - server was infected with malware, resulting in the need of 25 million SIM card replacements
  • Experiences with hybrid war activities, sabotage-activities and ways to signal these

Short live-survey: "Telecom Infrastructure Resilience and Preparedness: Energy Backup, Service Continuity, and Crisis Collaboration", 40' (including Q&A)

  • Participants fill in a short survey on the spot; results are shown in real-time; then a discussion starts after each answer

 

Presentation: "No power, no panic: How to prepare for grid disconnections", Elisa colleagues, 10' + Q&A

 

Presentation: “ETIS as a European Telco ISAC – update”, Andrija Višić, ETIS CO, 5’

11:00 – 11:30

Coffee Break

11:00 – 12:30

Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space

Session 5: "Telecom Resilience in the Face of Blackouts: Lessons from the 2025 Iberian Crisis”

Format: Presentation by MEO colleagues followed by a moderated discussion

Moderator(s): Ricardo Carrapiço & João Gueifão, MEO, Portugal

Theme: How telcos can better prepare for an outage similar to the 28 April 2025 one, that affected the Iberian peninsula countries and parts of southern France.

 

Crisis Response & Preparedness:

  • What strategies worked effectively, and what challenges emerged in telecom’s response in Portugal (and Spain).

Interdependencies & Collaboration:

  • How strong was the collaboration between telecoms, energy providers, and regulators? What role did these partnerships play during the crisis?

Data Management & Transparency:

  • How was critical data handled and shared during the blackout?
  • What improvements are needed for real-time information flow?

Power Outage Preparedness:

  • How are telecoms currently prepared for extended power outages (12+ hours)? What specific measures are in place to maintain service continuity?

Comprehensive Business Continuity:

  • How were internal and external communications managed during the outage? How did remote employees contribute to crisis management in real time? (added value)

Lessons Learned & Future Dilemmas:

  • What are the biggest dilemmas faced during such events, and how can they be mitigated? What are the lessons learned?

Operational Challenges During Outages:

  • How were logistical challenges handled, such as refuelling power generators amidst traffic chaos?

National Roaming & Regulatory Demands:

How did the outage revive discussions around National Roaming in Portugal? What are the regulator's expectations moving forward?

12:30 – 13:30

Meeting Room - KALLIRHOE
Location - Ground Floor

Lunch Break

13:30 – 14:30

Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space

Session 6: "Harmonising Continuity Practices Across the Telecom Supply Landscape"

Format: Workshop in 2 groups

Moderator(s): Leila Mahlous, Proximus, Belgium & Ricardo Carrapiço & João Gueifão, MEO, Portugal

 

Theme: This workshop dives into how telcos are managing their extended supply chains—contractors, subcontractors, and critical third parties—when it comes to business continuity and disaster recovery. Join us to share experiences, compare approaches to supplier oversight, audits, and contract design, and explore how aligned (or fragmented) current practices are across the industry.

 

Questions used in the workshop

  1. How do you manage BC expectations and responsibilities across your telecom supply chain, including contractors and subcontractors?
  2. What audits or assessments do you require from suppliers regarding continuity and DR readiness?
  3. How do you ensure subcontractors meet the same continuity and security standards as your direct contractors?
  4. How are BC and security controls integrated into supplier contracts—how consistent or harmonised are these across jurisdictions?
  5. What types of security and continuity clauses are becoming standard in telecom supply contracts in Europe?

14:30 – 15:30

Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space

Session 7: "Compliance and Regulatory Adaptation"

Format: Roundtable Discussion

Moderator(s): Leila Mahlous, Proximus, Belgium

 

Theme: Ensuring Compliance with NIS2, DORA, AI Act, CRA, etc.

e.g.: The requests from financial entities to comply with their contracts (DORA) increase the workload. How are organizations preparing for this?

15:30 – 16:00

Meeting Room - Conference Ground Floor
Location - Ground Floor conferencing space

Closing Session

A short session dedicated to follow-ups and discussing topics that arose during the meeting’s discussions. Participants will brainstorm and compile a list of future topics for consideration in upcoming ETIS events.

 

Before leaving, participants are kindly requested to fill out the Feedback Form.

16:00 – 17:00

Farewell Reception for all attendees in the Foyer

Event Context and Expectations

This workshop is a collaborative knowledge-sharing event, where success relies on active preparation and engagement from all participants.

  • Participants are invited to prepare a 15-20 min presentation relevant to one of the main sessions (ideally addressing one or more of the suggested topics within that session).
  • Topic selection confirmation with the organizer by May 5th and final presentation submission by May 28th.
  • Meeting is held under Chatham House Rules, following ETIS confidentiality and anti-trust policy.

Event Sponsorship and Participation

This event is fully sponsored by ETIS and its partners and sponsors, covering all meals, coffee breaks, the guided tour, and the farewell reception. Participation is free of charge.

Participation is open exclusively to ETIS member companies, and attendees are expected to actively contribute to discussions and presentations.


Registration and Support

If you have not yet registered for the event, or if other colleagues from your organization wish to register, please visit the website: HERE

For any questions, requests, or support, please do not hesitate to reach out to the organizer.

 

ETIS Central Office contact:

Andrija Višić

av@etis.org / +324 95 26 25 26 (Signal)

Hotel Layout