ETSI Security Conference 2026

Session D2-1: Cloud, SaaS, OT/IoT & product security inc. mobile app security

Cloud, SaaS, OT, and IoT security are converging through cloud-based SaaS platforms that offer visibility, threat intelligence, and automated risk mitigation for interconnected environments. This session will explore secure product design and implementation combining consumer end products and their cloud back-end services.

Session D2-2: Women in Cyber

Chaired by Helen L., NCSC

This inaugural Women in Cyber session at the ETSI Security Conference highlights the growing impact and importance of diverse voices in cybersecurity. The session will open with an inspiring keynote highlighting the achievements, challenges, and opportunities for women in cybersecurity, followed by a dynamic panel discussion bringing together perspectives from across the industry. Together, they will explore how to foster inclusivity, strengthen talent pipelines, and shape a more resilient and representative cyber ecosystem.

Session under development. Details coming soon.

Session D2-3: AI Security & Resilience - Part 1

Applications of Agentic AI are everywhere in 2026. However, with that increasing reliance on Agentic solutions both attackers and defenders are increasingly leveraging agentic AI. The success of the entire agentic revolution hinges on our ability to create a secure, transparent, and governable ecosystem.
This session will consider the following questions: How do we manage identity for billions of non-human agents? How do we defend against a new generation of AI-driven threats? How can trust be established? And the implications of Agentic AI making a mistake?

Session D2-4: Regulatory runway & compliance operations (EU & Global)

While Europe arguably leads the world in strong security regulation, the sheer number of overlaps, and even sometimes inconsistent regulations across EU, national and global levels leads to an increasingly complex regulatory landscape to navigate. This session will explore the impacts of regulatory overlap and fragmentation on the ICT and Telecoms industries.

Session D2-5: Social engineering – social human hacking

The manipulation of people into compromising their personal and/or organizational security. Its pre-dates the internet and has evolved as technology has advanced. How are we continuing to improve are methods to reduce the risk and chance of successful attacks? And what is required to meet the new challenges of GenAI and agentic agents being used to conduct Social Engineering?

Session D3-1: Networks & telecom security (5G/6G/Open RAN/Core/Signaling)

With 6G standardisation well underway in 3GPP and other international standards venues, this session will focus on the emerging approaches and challenges to standardising secure 6G.
The session will consider aspects including 5G and legacy inter working; Open RAN; core network security evolution; and signalling network security.

Session D3-2: CRA 2026: Proving secure-by-design at scale

With CRA harmonised standards nearing completion at the time of ETSI Security Conference 2026, this session will explore how the industry is already taking steps to address CRA compliance at market scale and how CRA compliance can bring both opportunities and challenges for companies placing product on the EU single market.

Session D3-4: Software security

Session Chaired by Helen L., NCSC

This session will examine evolving approaches to software security across both policy and practice. It will begin with an overview of international frameworks for software security, explaining how these initiatives are shaping secure development. The speakers will then explore how industry is adapting to address emerging technology disruptors, such as frontier AI, that are challenging traditional security models. The session will conclude with an interactive panel discussion, bringing together the speakers to compare approaches, debate common challenges, and identify practical ways to strengthen the security of software systems in an increasingly complex landscape.

Session under development. Details coming soon.

Session D3-5: Cryptography & quantum readiness - Part 1

Session chaired by Colin Whorlow, NCSC

We rely on cryptography and other cyber technologies every day to protect our data and secure our digital infrastructures. As progress toward a cryptographically relevant quantum computer advances, we are running out of time to protect our systems from the quantum threat.
What are the latest developments in quantum-safe technologies, and do we have everything we need to migrate to quantum-safe infrastructure?

Session D3-5: Cryptography & quantum readiness - Part 2

Session chaired by Matt Campagna, ETSI QSC Chair, AWS

Session D4-1: AI Security & Resilience – Part 2: Implications of agentic AI – attack and defence?

Applications of Agentic AI are everywhere in 2026. However, with that increasing reliance on Agentic solutions both attackers and defenders are increasingly leveraging agentic AI. The success of the entire agentic revolution hinges on our ability to create a secure, transparent, and governable ecosystem.
This session will consider the following questions: How do we manage identity for billions of non-human agents? How do we defend against a new generation of AI-driven threats? How can trust be established? And the implications of Agentic AI making a mistake?

Session D4-2: EUSR – CRA

Session under development. Details coming soon.

Session D4-3: EUSR CRA Panel Session: Successes and Challenges of CRA compliance

Session under development. Details coming soon.

Session D4-4: Panel Certifying the future: A live research debate on security certification

Panel moderated by Björn Fanta, Fabasoft

Session under development. Details coming soon.

Session D4-5: Reflection: The Next Frontier After 20 Years of Progress

Envisioning the future of cybersecurity standards and the role of European Standardisation Organisations in the global ecosystems, and priorities for ETSI.