Conference Description
Key Takeaways
- ETSI’s 20th annual security conference addresses AI security, quantum readiness, and regulatory compliance across four days of technical sessions and workshops.
- Sessions cover the EU Cyber Resilience Act, post-quantum cryptography, Zero Trust architectures, and securing 5G/6G networks.
- Designed for security engineers, CISOs, policy makers, and compliance officers working in telecom, cloud, IoT, and AI sectors.
- Participants from AWS, Google, Microsoft, Huawei, Nokia Bell Labs, ENISA, EUROPOL, and other major organisations contribute to the programme.
About the Event
The ETSI Security Conference 2026 marks the 20th edition of the European Telecommunications Standards Institute’s flagship cybersecurity gathering. Held in person at ETSI’s premises in Sophia Antipolis, France, the four-day event brings together government representatives, industry practitioners, academics, and standards bodies to examine current threats and collaborate on securing digital transformation.
The programme spans keynotes, technical sessions, panels, workshops, demonstrations, and poster presentations. Both executive and technical tracks run throughout the conference, with hands-on demonstrations and compliance workshops complementing the main sessions.
AI, Quantum, and Infrastructure Security
A significant portion of the agenda addresses AI security and resilience, including agentic AI, autonomous threats, and defensive strategies for AI-driven environments. Sessions examine how organisations can manage identity and trust for both human users and non-human agents operating within increasingly automated systems.
Quantum readiness features prominently, with technical content on post-quantum cryptography and crypto-agility. These sessions aim to help organisations prepare their cryptographic infrastructure for the transition to quantum-resistant algorithms.
Digital infrastructure security topics include Zero Trust architectures, identity-centric security models, and product security. The programme also covers telecom-specific concerns such as 5G and 6G security, Open RAN, and signalling vulnerabilities, alongside cloud, SaaS, and OT/IoT security considerations.
Regulatory and Compliance Focus
The conference dedicates substantial attention to regulatory compliance, particularly the EU Cyber Resilience Act and its implications for product manufacturers and software developers. Sessions address the challenge of navigating overlapping frameworks including the Data Act and AI Act, with practical guidance on achieving and demonstrating compliance at scale.
Supply chain security, continuous assessment methodologies, and certification processes form a recurring thread, reflecting the growing regulatory emphasis on secure-by-design principles and transparency throughout the software and hardware supply chain.
Who Should Attend
The conference serves security engineers, researchers, and technical leaders seeking detailed knowledge of emerging standards and implementation approaches. CISOs, CTOs, and senior security executives will find strategic content on compliance and risk management. Policy makers, regulators, and compliance officers can engage directly with standards development processes and industry practitioners. Product managers and developers working in security, telecom, cloud, and IoT will benefit from sessions on secure development practices and certification requirements.

