INCIDENTRON Project: Open Source Framework for Cross-Regulatory Cyber Incident Reporting

The tribe opens its virtual door to our CISO community, to exchange ideas, evaluate the good, the bad and the ugly, challenge the status quo, and share lessons learned.

For the final event in 2025 we’re honoured to welcome Ulrich Seldeslachts, CEO of LSEC and driver of the INCIDENTRON Project. Today’s session will be moderated by CISO Tribe founding member and seasoned Group CISO, Ivan Milenkovic.

Can't make it on this date? No worries, just register and you will automatically receive a link to the video directly after the event....

Introduction to INCIDENTRON: An open source Framework for Cross-Regulatory Cyber Incident Reporting

Cybersecurity leaders face a growing challenge: a single cyber incident increasingly triggers multiple reporting obligations across NIS2, GDPR, CER, CRA, DORA, other EU sector-specific and national regulations - each with different thresholds, timelines, authorities, and formats.

The result: Fragmented workflows, duplicated effort, compliance uncertainty, and operational pressure at the worst possible time.

In this session, we will introduce INCIDENTRON, a major EU-funded initiative dedicated to solving this problem by creating:

1. A cross-regulation open-source reporting framework
2. An automated incident reporting platform integrating MSSPs, Critical, Essential, and Important Entities, National CSIRTs and other reporting authorities
3. A European community enabling alignment, best practices, and shared readiness
4. New capacity-building tools, including cyber range exercises built from real incidents, best practices for vulnerability disclosure under the CRA, and collaborations with law enforcement agencies.

This is the first public session presenting the project to the CISO community.

What You will learn:

✔ How NIS2, GDPR, CER, CRA, and sectoral regulations interact in real-world incidents

✔ The architecture and vision behind the INCIDENTRON automated reporting platform

✔ Insights from MSSPs, CSIRTs, and end-user organisations shaping the solution

✔ How INCIDENTRON will simplify breach impact assessments and threshold decisions

✔ How the open-source framework can integrate into your own SOC / IR workflows

✔ Opportunities for Critical, Essential, and Important Entities, MSSPs and CSIRTs to join pilots, events, trainings and advisory groups

Agenda:

14h00: Welcome -- CISO Tribe (NL)

14h05: Introduction by your moderator -- Ivan Milenkovic, CISO Tribe (UK)

14h10: Presentation -- Ulrich Seldeslachts (Belgium)

14h35: Q&A Session -- Audience, Ivan and Ulrich

14h55: Closing remarks and next events -- Wim