Executive summary
The European Cyber Security Organisation (ECSO) presents its latest Action Plan to simplify and harmonise cybersecurity regulatory requirements across the EU. Developed through extensive consultation with public and private stakeholders, this strategic document outlines actionable recommendations in four key areas: incident reporting, risk management frameworks, supply chain security, and assessments & auditing.
Designed to enhance cross-border coordination and support SMEs, the plan offers practical pathways for regulatory alignment and operational efficiency. ECSO invites all cybersecurity stakeholders to engage with the recommendations and contribute to shaping a more resilient and strategically autonomous European cybersecurity landscape.
About the ECSO Policy Analysis and Outreach Stream
The ECSO Policy Analysis and Outreach Stream delivers in-depth policy analysis to ECSO Members, helping them decode and act upon key European cybersecurity developments. The initiative involves close collaboration with EU policymakers and the integration of insights from both public and private sectors. By engaging with European and international stakeholders, it promotes meaningful dialogue for a structured, dynamic European cybersecurity landscape.

Cristian Michael Tracci
Senior Manager for Policy Analysis and Outreach
cristian.tracci[at]ecs-org.eu

Sebastijan Čutura
Senior Manager, Industry Cybersecurity
sebastijan.cutura[at]ecs-org.eu

Simona kaneva
Manager for Policy Analysis and Outreach
simona.kaneva[at]ecs-org.eu

Angèle Billaud
Trainee for Policy Analysis and Outreach
angele.billaud[at]ecs-org.eu