Incident Reporting in Europe: Challenges, Developments and Opportunities (INCIDENTRON)

Cyber incident reporting is becoming increasingly complex. Organisations today must navigate overlapping obligations under NIS2, DORA, GDPR, CRA and other (sector-specific) frameworks, while dealing with multiple authorities, different reporting timelines, national transpositions, and cross-border incidents. At the same time, Europe is pursuing several harmonisation initiatives, including common reporting templates, the Single Entry Point (SEP) and broader efforts to streamline reporting obligations.

But will harmonising reporting channels and templates be enough?
This interactive workshop introduces the INCIDENTRON project and its approach to simplify and improve cyber incident reporting. Rather than starting from individual regulatory frameworks, INCIDENTRON starts from the incident itself and explores how legal obligations can be translated into operational workflows, decision logic and automated reporting processes.
The session will also explore broader policy questions around harmonisation, national implementation and the future direction of the European reporting ecosystem. How can organisations navigate today’s fragmented landscape? What level of harmonisation is realistic? And what should the next generation of reporting solutions look like?

The discussion builds on and presents feedback collected through engagements with CISOs, MSSPs, reporting authorities and CSIRTs across Europe. Common themes include the operational burden of parallel reporting obligations, cross-border reporting challenges, inconsistent threshold interpretation, authority routing complexity and the gap between legal requirements and operational reality.

Participants will have the opportunity to challenge assumptions, share experiences and contribute perspectives from industry, authorities, academia and policy communities. The objective is not only to discuss the future of incident reporting, but to help shape it.