08:30– 09:00

09:00 – 11:00

1st Floor Meeting Room

Introduction and Roundtable, 10'

Goal: Welcome speech and agenda overview, followed by a roundtable where all participants introduce themselves (only name, company, role).

Presentations:

• Welcome by GO Malta, 15'
• ISAC updates, ETIS Central Office, 5'
• Telco Security Benchmark 2026, TNO, 10'

Company Updates (part I), 80'

Goal: Each company is allocated 3 minutes to present recent challenges, threats, incidents, projects, and future plans. Also delivering expectations from this 2-day meeting. New members in the group receive a longer time slot, if requested.

A Power Point Template to fill in will be circulated to all members in advance of the meeting. Members who presented their update in Athens (June 2025) are asked to only present news since June.

• A1 Telekom Austria
• BT
• Cablenet
• Ericsson
• Fortinet
• Google
• Hrvatski Telekom
• Huawei
• KPN
• LMT
• Oracle
  
• Post Luxembourg (10-15 min)
• Sunrise
• Swisscom
• Telenor Norway
• Tet
• Vodafone Germany
• Yettel Hungary

Moderator: Andrija Višić, ETIS Central Office

11:00 – 11:30

Coffee Break

11:30 – 13:00

1st Floor Meeting Room

Goal: In the previous session, telcos have delivered many of their cybersec. strategy updates. In this session, we will hear about suppliers' progress in preparing for PQC future and where telcos stand in their preparations. After the remote session is finalised, we will try to understand the position of members on (cyber)war preparedness in our ecosystem.

Presentation 1: "Quantum Computing and Post-Quantum Cryptography", Tom Curry, Google, 30' + Q&A

Description: Progress in Quantum Computing, PQC Risk Assessment & Migration Planning, Crypto Agility, Telecom Operator Perspectives

Format: hybrid session via MS Teams with participants from the ETIS Quantum Resilient Security & Architecture WG, until 12:30.

Presentation 2: "When does CyberWar turn into real War", Alexander Rockel, Oracle, 20' + Q&A

Moderator: Rolv Hauge, Telenor Norway, Group Chair

13:00 – 14:00

1st Floor Meeting Room

Lunch Break

14:00 – 15:30

1st Floor Meeting Room

Format: Two presentations with Q&A sessions

Presentation 1: (remotely) "Swisscom Cyber Hygiene", Miljan Lalić, Swisscom, 45' (including Q&A)

• What does cyber hygiene mean at Swisscom? What do we do? How do we identify unknown areas?

Additional theme: 

• Information sharing on supply chain security
• SBOMs in place among European telecom operators 

Presentation 2: Draft title: "Risks to MNOs from potential SBOM leakage", Patrik Palm, Ericsson, 15' + Q&A

Other? Email Andrija at av@etis.org 

SBOM starter guide available here: https://english.ncsc.nl/publications/publications/2024/july/30/software-bill-of-materials-starter-guide

Moderator: ISWG Core-team

15:30 – 15:50

Coffee Break

15:50 – 17:00

Presentation 1: "Advancing resilience in the times of hybrid war", Egons Bušs, LMT, 30’

Discussion: 10'

Moderator: Rolv Hauge, Telenor Norway, Group Chair

+

Format: Roundtable discussion (30') on "ETIS Telco Cloud Security & Data Comparison Initiative"

One-pager has been circulated with members. Short intro will be given by ETIS.

Moderator: Andrija Višić, ETIS Central Office + ISWG Core-Team

17:00 – 18:30

18:30 – 19:30

19:30 – 22:00

09:00 – 10:40

1st Floor Meeting Room

Introduction/recap + break-out group assignments, 20'

Description: The Telco Security Landscape is an annual publication between TNO and ETIS's Information Security WG members. It is a tangible outcome for telco security professionals worldwide to use. All participants in the meeting are encouraged to participate in the break-out group discussions and the plenary consolidation ofoutcomes.

• Participants are encouraged to browse the one pager that will be circualted in addition to the 2025 version of the Landscape.

3 Groups are created, each appointing a note taker and a rapporteur.

Break-out group discussions, 50'

Plenary consolidation of outcomes, 30':

• Group 1, 10'
• Group 2, 10'
• Group 3, 10'

Workshop closing and defining next steps, 5'

Moderator: Richard Kerkdijk, TNO, Group Vice-Chair

10:40 – 11:00

Coffee Break

11:00 – 12:30

1st Floor Meeting Room

Theme: European telecom operators have made significant strides in fortifying their cybersecurity capabilities through advanced AI and generative AI solutions. From threat detection and automated response to proactive vulnerability management, operators are redefining cyber defense strategies. This session will explore what worked—highlighting successful practices, deployment models, and real-world outcomes. It will also examine key trends shaping the next wave of innovation in 2026, including AI-driven SOCs, synthetic threat modeling, and predictive defense

Presentation 1: Title TBC - Kenneth Ciangura, GO Malta, 15' (+Q&A)

Presentation 2: (Remote by Telenor Norway colleague starting at 11:30) Draft title: "Reducing cognitive load with LLM ", Kai Arne Schröder Myklebust, Telenor Norway, 20' + Q&A

• ETIS CERT-SOC WG members to be invited to participate remotely

Presentation 3: (Remote by TNO colleagues starting at 12:00) "Applying Large Language Models to Cyber Threat Intel", Arthur Melissen & Leonardo Morelli, 20' + Q&A

Presentation 4: "AI for Security Cases", Yoann Klein, Huawei, 10'

Moderator: Andrija Višić, ETIS Central Office

12:30 – 13:30

Lunch Break

13:30 – 14:20

1st Floor Meeting Room

Presentation by Mohamed Ourdane & Alexandre de Oliveira, Post Luxembourg, 20' + 20'

Moderated discussion: 10'

Moderator: Rolv Hauge, Telenor Norway, Group Chair

14:20 – 14:30

Short Break

14:30 – 15:00

1st Floor Meeting Room

Presentation: "Results of the annonymous survey among ISWG and BCWG members (Athens, June 2025)", Richard & Rolv, 15-20'

Format: Roundtable discussion moderated by Richard Kerkdijk, TNO

15:00 – 15:15

1st Floor Meeting Room

A short session dedicated to follow-ups and discussing topics that arose during the meeting’s discussions. Participants will brainstorm and compile a list of future topics for consideration in upcoming ETIS events.