GROUP DESCRIPTION

Brings together computer emergency response teams and security operations center professionals to enhance cooperation and leverage the overall security of the telco infrastructure.

KEY FOCUS AREAS IN 2025-2026:

• Threat intelligence sharing: frequent catch-up calls and a MISP sharing platform
• Vulnerability & risk management: Threat actors + risk analysis, mitigation; Red teaming, Purple teaming
• Incident handling & management: Responsibilities, processes, documenting, learnings and incident response, SOAR integration in SOC
• Internal & external security + protection: Data, devices & infrastructure protection, awareness and education

PARTICIPANT PROFILE:

• CERT CSIRT SOC managers,
• Analysts,
• Specialists

HOW WE WORK:

• 2 In-Person Meetings per Year: Held every year in Spring and in the Fall, offering deep-dive discussions, showcases, and focused networking in a trusted environment, offering deep-dive discussions and focused networking in a trusted environment.
• The next physical meeting of this Working Group will take place in Dusseldorf, Germany, hosted by Vodafone on 20-21 November 2025. Register here . 
• 24 Online Activities per Year: Virtual events (webinars, roundtables, knowledge exchanges) based on member demand:
• Threat Intel Sharing Calls
• Expert Talks

PARTICIPATING COMPANIES:

Includes leading European telecom operators and partners from telco CERT-SOC and CSIRT departments.(Full member list available upon request or via ETIS member portal.)

GROUP COORDINATOR:

The ETIS CERT-SOC Working Group is coordinated by Andrija Višić, who facilitates all activities, drives member engagement, and ensures seamless collaboration.

For any questions or to learn more about how to get involved, don't hesitate to reach out.

Working Group confidentiality rules can be accessed here .

Display map with group members