Brings together computer emergency response teams and security operations center professionals to enhance cooperation and leverage the overall security of the telco infrastructure.

• Threat intelligence sharing: frequent catch-up calls and a MISP sharing platform
• Vulnerability & risk management: Threat actors + risk analysis, mitigation; Red teaming, Purple teaming
• Incident handling &management: Responsibilities, processes, documenting, learnings and incident response, SOAR integration in SOC
• Internal & external security + protection: Data, devices & infrastructure protection, awareness and education

The next physical meeting of this Working Group will take place in Dusseldorf, Germany, hosted by Vodafone on 20-21 November 2025. Register here.

The CERT-SOC WG, together with the ETIS Information Security working group forms a European Telco ISAC.

Guidelines for this group can be accessed here.