On December 5, 2023, the European Cyber Security and Critical Infrastructure (ECSCI) community came together for a Remote Workshop focused on Collaborative Standardisation and Policy Making for Greater Critical Infrastructure (CI) Resilience in Europe. The workshop, driven by the goal of gathering diverse perspectives, aimed to formulate a joint strategy for efficient and effective collaborative standardisation and policy-making initiatives.

The agenda set the stage for a comprehensive exploration of key facets, emphasizing the importance of understanding the European Commission’s long-term vision on CI resilience, learning from closed EU-funded projects, recognizing gaps in current standardisation and policy-making activities, and identifying opportunities presented by ongoing EU-funded projects.

A significant highlight of the workshop was Wissam Mallouli’s presentation on the AI4CYBER project. Coordinated by Tecnalia, Spain in the person of Dr. Erkuden Rios. Wissam Mallouli, partner of the project from Montimage (France), provided insights into the project’s framework, key results, and the adoption of standards crucial to enhancing cybersecurity. The standards adopted by the AI4CYBER project covered diverse areas:

  • Cybersecurity Standards: ENISA reports, NIST SP 800-37, NIST CSF, and more.
  • Cyber Incident Information Sharing: NIS 2 Directive, STIX.
  • Trustworthy AI: EU AI Act, ENISA Cybersecurity of AI and Standardisation, ENISA Multilayer Framework for Good Cybersecurity Practices for AI, ETSI GR SAI reports, ISO/IEC 24028:2020, ISO/IEC 24029, NIST AI 100-2e2023 ipd, NIST AI RMF 1.0, de facto MITRE ATLAS.

This presentation not only showcased the progress and outcomes of the AI4CYBER project but also contributed valuable insights into the practical adoption of standards within an active EU-funded initiative.

Throughout the workshop, participants engaged in discussions aimed at synchronizing efforts, sharing experiences and lessons learned from closed projects, and collectively addressing the challenges and opportunities in CI resilience. The day concluded with a focus on joint perspectives, fostering collaboration among stakeholders to strengthen the standardisation and policy-making landscape for the benefit of Europe’s Critical Infrastructure.

By Wissam Mallouli.