Conference Description
Key Takeaways
- ENISA’s third annual European conference dedicated to cybersecurity awareness, themed “From Awareness to Impact”
- Explores the role of generative AI in driving behaviour change and the integration of awareness into hybrid cyber defence
- Focuses on practical methods for measuring the effectiveness of awareness programmes
- Designed for national authorities, private sector organisations, academia, CISOs and security awareness managers
- In-person event held in Stockholm, Sweden
About the Event
The 3rd European Cybersecurity Awareness Raising Conference is organised by ENISA, the European Union Agency for Cybersecurity. The 2026 edition convenes European and international thought leaders at The Palm Hall, Palmsalen, Gamla Posthuset in Stockholm. The conference brings together public and private sector representatives, researchers and cybersecurity professionals to address current and emerging challenges in cybersecurity awareness.
Core Topics
The programme centres on four main areas: the future of cybersecurity engagement, the role of cyber awareness within hybrid cyber defence and warfare, how generative AI influences behaviour change, and best practices for measuring the impact of awareness activities. These topics reflect a shift from awareness as a standalone function toward its integration with broader defence strategies and measurable organisational outcomes.
The Human Factor and Behaviour Change
The conference operates within the cybersecurity awareness and cyber hygiene space, with particular attention to the human factor. Sessions address how organisations can move beyond basic awareness campaigns to achieve genuine behaviour change, and how emerging technologies such as generative AI can support or complicate these efforts.
Who Should Attend
The event is designed for national and EU authorities, private sector organisations, and the research and academic community. Likely attendees include CISOs, security awareness managers, policy makers and leaders responsible for cybersecurity education and culture within their organisations.