Cybersecurity/Network and Information security

https://www.iso.org/committee/45020.html

Organization

Independent Consultant

Portrait Picture

Proposal Title (6th Open Call)

communication and promotion of European interests in international ICT standardisation

Standards Development Organisation

StandICT.eu Year

2026

Year

Topic (6th Open Call)

Antoine Sciberras

Description of Activities

My work aims to rationalise the resulting compliance efforts through a dedicated Technical Report (TR) under ETSI CYBER. This report will help reduce legal ambiguity, support standardisation across sectors, and ensure proportional and efficient compliance.

Fellow's country

Malta

Impact on SMEs (6th Open Call)

This project has significant implications for SMEs across the EU. Many of these companies provide ICT services to regulated entities but may lack the resources to navigate complex, overlapping regulatory regimes. By providing a unified interpretation of NIS2 and DORA obligations, the project reduces uncertainty and helps SMEs avoid redundant compliance efforts.

Impact on society (6th Open Call)

Yes. The initiative is centred on the development of a new Technical Report within ETSI CYBER, aimed at clarifying the joint application of NIS2 and DORA. A formal proposal has been submitted and approved as a work item under ETSI CYBER’s work programme.

Linkedin Profile

Linkedin profile

Open Call

OC#6 2026

Organisation type

Academia/Research

Organization

University of Malta

Portrait Picture

Proposal Title (6th Open Call)

Contributing to the evolution of ICT standards by providing clarity where EU-level legislation currently creates operational ambiguity

Standards Development Organisation

ETSI

StandICT.eu Year

2026

Year

Topic (6th Open Call)

Nicolae Paladi

Description of Activities

Through this fellowship, I am contributing to shape the standards around next-generation secure computing infrastructure. We are on the verge of a new paradigm where the security of the computing infrastructure is endorsed by hardware features and ensures protection of data at rest, in transit, and in use.

Fellow's country

Sweden

Open Call Topics

Impact on SMEs (5th Open Call)

Trusted execution environments (TEEs) allow deploying code and data in a separate, secure segment of computing platforms. Standardised security assessment and provisioning of configuration and personalisation information to Trusted execution environments (TEEs) can be a key contributor to more secure services and an enabler for new products and services.

Linkedin Profile

Open Call

OC#5 2026

Organisation type

Attestation Results for Secure Interactions

Organization

CEO CanaryBit.eu

Organization website

CEO CanaryBit.eu

Portrait Picture

Standards Development Organisation

IETF

StandICT.eu Year

2026

Year

Topic (5th Open Call)

Denis Pinkas

Description of Activities

The use of digital identity wallets is foreseen to be the best appropriate solution to support an age verification method, which uses the date of birth of the individual without disclosing it.

Country

France

Fellow's country

France

Open Call Topics

ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

Impact on SMEs (5th Open Call)

If successful, the impact will not be restricted to European SMEs and/or European societies.
As my contributions are both for ISO and the IETF, the impact can be worldwide. However, I have not observed the presence of another European expert motivated by the topic of Age assurance systems that participates both in ISO JTC1 SC 27 and in the IETF.

Impact on society (5th Open Call)

The societal impacts can be important. Age assurance which entails age verification, age estimation and age inference is applicable for a large variety of use cases. Protection of children is the most prominent use case.

Impact on society (8th Open Call)

Access to pornographic content and age-restricted services or products available online, like alcohol, diets, self-harm or suicide information, needs to be better controlled. Legislation is necessar,y but will not be sufficient: efficient methods need to be put in place. Two main categories of solutions are promising: age estimation using AI facial analysis and digital identity wallets. The AI Act published in the Official Journal (OJ) of the European Union on 12 July 2024 considers applications using AI for age estimation as “high-risk applications”. The EUDIW (EU Digital Identity Wallet) is expected to be usable for performing age verification in both online and proximity modes. Besides these usages, age verification, estimation, or inference will be useful in other areas, such as controlling the age of teenagers or elderly people, so that they can obtain rebates. This will speed up controls and avoid the presentation of physical identity documents.

Open Call

OC#5 2026

OC#8 2026

OC#1 2029

Organization

CEO, DP Security Consulting SAS

Portrait Picture

Proposal Title (5th Open Call)

Age-restricted accesses to services while preserving the privacy of individuals

Proposal Title (8th Open Call)

Privacy preserving age assurance systems for online or in-person access to services or goods

Standards Development Organisation

Topic

Cybersecurity

StandICT.eu Year

2026

2029

Year

Topic (5th Open Call)

James Davenport

Description of Activities

There is currently no standard addressing the cybersecurity of AI systems. In ISO/IEC JTC1 SC27 WG4 27090 is under development; and I contribute directly to this work.

Fellow's country

United Kingdom

Open Call Topics

CEN-CENELEC JTC 21 ‘Artificial Intelligence’

Impact on SMEs (7th Open Call)

Many of these standards, e.g. Bias, impact society. In terms of SMEs, I have been closely associated with a software SME, and always ask myself how this SME would be impacted.

Impact on SMEs (9th Open Call)

Many of these standards, e.g. Bias, impact society. In terms of SMEs, I have been closely associated with a software SME, and always ask myself how this SME would be impacted. I am also sensitive to the views of one of my editors who is CTO of an Austrian SME.

Impact on society (4th Open Call)

The EU AI Act places high importance on cybersecurity of AI systems and products, but there is comparatively little work done on this, and none that has reached the level of mature standards. Hence it is important to develop these standards, and ensure that they reflect both the cybersecurity point of view and the specific difficulties of AI, as in the ETSI list , and possibly wider.

Impact on society (7th Open Call)

Europe has already seen many cybersecurity attacks, whether by hostile nation states or by criminal gangs, even before AI becomes widely deployed. The impact of these has already led to at least one death, as well as much damage and distress. As AI becomes more widely deployed, these risks will only grow, and need effective standards-driven mitigations. The impact of my work will be coherence between the developing European standards in ISO-IEC JTC/1 SC27 and the current international draft standards in the area of cybersecurity. In addition, I will feed in research from the cybersecurity community as it affects AI-specific attack methods.

Impact on society (9th Open Call)

Artificial Intelligence has numerous societal implications, particularly around implicit biases. Machine Learning learns from data which reflects the society we have (or had if the data is historic) rather than the society we believe we have, or wish we have. Hence my WG is working on a Bias standard, dealing operationally with detection and mitigation, to build on the excellent work does in ISO-IEC, to which I have contributed. Furthermore, I frequently give interviews with media (typically UK media) on AI. I have also spoken on AI standardisation at relevant subject-matter conferences (on Natural Language Processing and Symbolic Methods)

Linkedin Profile

Open Call

Organisation type

Organization

University of Bath

Organization website

University of Bath

Personal website

ORCID

Portrait Picture

Proposal Title (4th Open Call)

Artificial Intelligence and Cybersecurity Standardisation

Proposal Title (7th Open Call)

Artificial Intelligence Standardisation (including Cybersecurity)

Proposal Title (9th Open Call)

Artificial Intelligence Standardisation (Accuracy, Cybersecurity and other topics)

Role in SDO

Standards Development Organisation

StandICT.eu Year

2026

2029

Year

Topic (4th Open Call)

Topic (7th Open Call)

Topic (9th Open Call)

Accessibility of ICT products and services

Annegrit Seyerlein-Klug

Description of Activities

Annegrit's priority is the Convenorship of CEN CENELEC JTC21 WG 5, the organisation and project support to work on the AI Act standardisation request for Cybersecurity. This includes a close collaboration with other groups within JTC 21, JTC 13, ISO IEC SC 42 and SC 27 to collect all information of existing and work under development. The main challenge is that JTC 21 and also our WG5 has a diverse structure of experts and knowledge, which makes the work, the effort and efficiency very difficult. In this case, the challenge in addition is the collaboration with other existing standardisation groups within JTC 21 as well as with JTC 13 for Cyber Resilience Act, with ETSI and their view, with ISO IEC SC 27 and SC 42.

Fellow's country

Germany

Open Call Topics

CEN-CENELEC JTC 21 ‘Artificial Intelligence’

Impact on SMEs (4th Open Call)

Contributing activity for a new work item NWIP within CEN CENELEC JTC 21 WG5 “Artificial Intelligence - Cybersecurity specifications for AI systems” and developing the standard on the basis of the gap report.

Impact on SMEs (7th Open Call)

A lot of European SME and/or European societies will be affected in the one or other way from AI-systems in the future in all areas of our living environment, from AI in medical devices, in personal equipment over autonomous driving until general purpose AI systems like chat gpt or Metaverse platforms. The challenge is to align the standards with the regulation but also with the needs of SME and European values. For this reason, the AI Act asked for standards, which CEN/CENELEC is developing.

Impact on SMEs (9th Open Call)

European SMEs , which are providing risk or high risk AI systems in the European market are effected by the AI Act and in that case also from the standard I work for and contribute: Cybersecurity Specifications for AI- Systems.

Impact on society (4th Open Call)

Cybersecurity is elementary for every digital asset and very important also for AI-Systems as a digital asset to be secure, safe, healthy and respecting fundamental rights.

Impact on society (7th Open Call)

The proposed activity aims to answer the official EU standardization request for the EU AI Act and specifically No. 8 Cybersecurity. Thrustworthy Metaverse solutions are based on trustworthy AI solutions. Trust and cybersecurity of AI and Metaverse can be ensured with well developed standards from cybersecurity and AI experts with business background. In case of the European Union harmonized standards as presumption of conformity to the EU Regulation are requested, in this case the request is for the AI Act and CRA as an essential fundament for a trustworthy and secure web 4.0 with virtual world and Metaverse with the specific EU focus on safety, fundamental rights, health and data protection.

Impact on society (9th Open Call)

The AI Act has the goal to avoid or mitigate negative impact on people and society regarding Fundamental Rights, Health and Safety. All harmonized standards for the AI Act support this goal and request of the AI Act including the standard for Cybersecurity specifications for AI Systems.

Linkedin Profile

Open Call

Organisation type

Organization

neurocat GmbH

Organization website

neurocat

Portrait Picture

Proposal Title (4th Open Call)

Convenorship for AI Act Standardization Request CEN CENELEC JTC 21 WG Cybersecurity

Proposal Title (7th Open Call)

Secure Metaverse by using EU harmonized standard for Cybersecurity for Artificial Intelligence

Proposal Title (9th Open Call)

Cybersecurity for AI Systems in Standardisation under the EU AI Act for a secure digital fundament

ISO/IEC JTC 1/SC 27

Role in SDO

Standards Development Organisation

Topic

Artificial Intelligence

StandICT.eu Year

2026

2029

Year

2025

Topic (4th Open Call)

Accessibility of ICT products and services

Topic (7th Open Call)

Topic (9th Open Call)

Daniel Waszkiewicz

Description of Activities

My work aims to develop robust frameworks for the verification of cryptographic protocols within the security of ICT products, services, and processes, thereby enhancing resilience against cyber threats.

Fellow's country

Poland

Open Call Topics

Government/Public Services

Impact on SMEs (4th Open Call)

Ensuring that protocols are rigorously verified according to standardised methodologies could, at least partly, lower the financial barriers for SMEs to enter the certification market, as the consistent and reliable verification of protocols would streamline the certification of more complex systems.

Impact on SMEs (5th Open Call)

By implementing rigorous, standardized verification methods, the overall efficiency of the certification process would improve. This would, to some extent, lower financial entry barriers for SMEs in the certification market, as consistent and dependable protocol verification would simplify the certification of more intricate systems.

Impact on SMEs (6th Open Call)

A unified approach to the verification of cryptographic protocols within cybersecurity certification schemes could significantly reduce the costs and workload associated with certifying composite products or services. By ensuring that protocols are rigorously verified using standardized methodologies, the overall efficiency of the certification process would improve. This could, at least in part, lower the financial barriers for SMEs to enter the certification market, as consistent and reliable verification of protocols would streamline the certification of more complex systems.

Impact on SMEs (7th Open Call)

Impact on society (4th Open Call)

My work is centred on creating robust frameworks for verifying cryptographic protocols within ICT products, services, and processes, ultimately strengthening resilience against cyber threats.

Impact on society (5th Open Call)

In the broader European context, my fellowship is poised to have a significant impact on cybersecurity practices, aligning with the objectives set forth by the Cybersecurity Act (CSA) and advancing European interests in bolstering digital security.

Impact on society (6th Open Call)

My primary focus is on developing standardized verification methodologies for cryptographic protocols, which play a key role in enhancing cybersecurity practices across Europe. I am working on creating robust frameworks for verifying these protocols within ICT products, services, and processes, ultimately contributing to greater resilience against cyber threats.
The Cybersecurity Act (CSA) promotes the use of certification as an effective cybersecurity tool that can be applied consistently across Member States without creating unnecessary administrative burdens. Previously, products or services certified in one country often had to undergo similar procedures again when different national requirements were in place.
With the introduction of the European Cybersecurity Certification (EUCC) scheme, however, certificates issued under this framework will be legally recognized across all Member States once the corresponding Implementing Act is in force. This harmonization is essential for reducing duplicated efforts, saving time and resources, and ensuring consistent cybersecurity standards throughout Europe.

Impact on society (7th Open Call)

Open Call

Organisation type

Organization

Cryptography specialist, National Institute of Telecommunications

Organization website

Cryptography specialist, National Institute of Telecommunications

Portrait Picture

Proposal Title (4th Open Call)

Developing ISO/IEC 29128 parts 2 and 3

Proposal Title (5th Open Call)

Progressing ISO/IEC 29128 parts 2 and 3

Proposal Title (6th Open Call)

Advancing ISO/IEC 29128 parts 2 and 3

Proposal Title (7th Open Call)

Advancing ISO/IEC 29128 parts 2 and 3

ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

Standards Development Organisation

Topic

Cybersecurity

StandICT.eu Year

2026

2029

Year

2025

Topic (4th Open Call)

Topic (5th Open Call)

Topic (7th Open Call)

Stéphane Joret

Description of Activities

Understanding how to work in international standardisation committees is vital, which implies going beyond IT asset management microcosm to deliver more value to related disciplines such as cybersecurity or sustainability.

Fellow's country

France

Open Call Topics

Data Economy

Impact on SMEs (4th Open Call)

ISO 19770-10 target audience is organisations that want to improve their IT asset management. This includes SMEs such as practitioners and improvers in public and private organisations, ITAM consultants, ITAM trainers and training providers.

Impact on SMEs (7th Open Call)

ISO 19770-10 target audience is organizations that want to improve their IT asset management. This includes SMEs such as practitioners and improvers in public and private organizations, ITAM consultants, ITAM trainers and training providers.

Impact on society (4th Open Call)

Simplified ITAM adoption, thanks to practical guidance and appropriate skill development, can financially benefit all European public and private organisations, reduce the European impact of ICT on the environment, and reduce economic and technological dependence on non-European companies.

Impact on society (7th Open Call)

Simplified ITAM adoption thanks to practical guidance and appropriate skill development can be financially beneficial to all public and private organizations in Europe, can reduce European impact of ICT on the environment, and reduce economic and technological dependence on non-European companies. The impact can be huge, as IT assets are everywhere, notably with a growing presence in the industry. Trustworthy data about IT assets is a key enabler for IT security that is now crucial in the context of hybrid war at the European eastern border.

Linkedin Profile

Open Call

OC#4 2026

OC#7 2026

OC#2 2029

Organisation type

Senior expert consultant in ITSM and ITAM, Liscience

Organization

Senior expert consultant in ITSM and ITAM, Liscience

Organization website

Portrait Picture

Proposal Title (4th Open Call)

Guidance (ISO 19770-10) for implementing IT asset management

Proposal Title (7th Open Call)

Guidance (ISO 19770-10) for implementing IT asset management

ISO/IEC TS 19770-10:2025

Role in SDO

Standards Development Organisation

ISO

StandICT.eu Year

2026

2029

Year

2025

Topic (4th Open Call)

Data Economy

Topic (7th Open Call)

Data Economy

Johann Groszschaedl

Description of Activities

Improving security is one of the most, if not the most, important priorities for the evolution and future development of the IoT.

Fellow's country

Luxembourg

Open Call Topics

Impact on SMEs (2nd Open Call)

MSP430 microcontrollers are deployed in thousands of IoT devices of European companies in all segments of the Embedded/IoT industry, ranging from automotive appliances over industrial control systems to medical devices. Many of the companies that designed and/or manufactured these devices are SMEs.

Impact on society (2nd Open Call)

This project has contributed to improve the security of the IoT since cryptographically strong E2E protocols are the foundation upon which secure architectures, systems and protocols can be built.

Linkedin Profile

Open Call

OC#2 2026

Organisation type

Academia/Research

Organization

University of Luxembourg

Organization website

University of Luxembourg

Portrait Picture

Proposal Title (2nd Open Call)

IoTDisco: Strong yet Lightweight End-to-End Security for the Internet of Constrained Things

Standards Development Organisation

IETF

StandICT.eu Year

2026

Year

Topic (2nd Open Call)

François Lorek

Description of Activities

This fellowship allows me to take part to all meetings concerning Cybersecurity, Privacy and Artificial Intelligence (even most are very early or very late in the day, as per rules for scheduling in SDO's), whilst being able to keep delivering standard based consulting especially for SMEs which need to comply for ISO 27001 certifications mostly.

Fellow's country

France

Open Call Topics

Impact on SMEs (2nd Open Call)

Provide confidence to SMEs about concerned about Cybersecurity & Privacy standards within Artificial Intelligence.

Impact on SMEs (4th Open Call)

Many small and mediums companies are about to be impacted by Cybersecurity & Privacy, IoT & DT or Artificial Intelligence standards or are concerned by Cybersecurity & Privacy within Artificial Intelligence with a need to make their market and potential customers confident, especially in the context of forthcoming standards related to regulations at european level.

Impact on society (2nd Open Call)

The work being carried out under the guidance of the officers of which I am a member is helping to reassure businesses and civil society alike as to how confidence can be guaranteed, and how drifts can be avoided by providing maximum protection against today’s emerging threats associated with the acceleration of artificial intelligence-based technologies.

Impact on society (4th Open Call)

Among others ISO officer duties and ISO/CEN/CENELEC standardisation expert I expect to provide the following benefits: clarity of roadmap and scopes, encourage constructive collaboration and participation of SC41 & SC42 experts in SC27 AhG2 & 3, maintain a smooth and efficient organisation of working sessions,

Linkedin Profile

Open Call

OC#2 2026

OC#4 2026

Organisation type

ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

Organization

TRAX

Organization website

TRAX

Portrait Picture

Proposal Title (2nd Open Call)

Developing cybersecurity standardisation for Artificial Intelligence and Internet of Things

Proposal Title (4th Open Call)

Developing cybersecurity standardisation for Artificial Intelligence and Internet of Things

Role in SDO

Standards Development Organisation

StandICT.eu Year

2026

Year

Topic (2nd Open Call)

Topic (4th Open Call)

Sandra Feliciano

Description of Activities

My fellowship focuses on several priorities and key gaps related to AI and cybersecurity standards applied in education.

Fellow's country

Portugal

Open Call Topics

ESTG - Politécnico do Porto

Impact on SMEs (5th Open Call)

It impacts educational organisations in any country and of all legal forms and sizes (including SME) and also includes training departments of SMEs from other economic sectors.

Impact on SMEs (8th Open Call)

This contribution helps ensure that cybersecurity and AI standards are usable and relevant for SMEs and Micro-SMEs, which often lack the capacity to influence or implement complex requirements. By representing their needs in ETSI TC SAI, I promote practical, inclusive solutions that reflect operational realities.

Impact on society (5th Open Call)

Moreover, by tailoring ISO 42001 and ISO 27001 to the education sector, the project directly strengthens the cybersecurity posture of educational institutions across Europe. This includes safeguarding sensitive student data and protecting educational infrastructures from cyber threats. Also, the development of specific guidelines ensures a harmonized approach to cybersecurity across European educational systems, fostering a more secure and resilient digital education environment.

Impact on society (8th Open Call)

The work also impacts European society by aligning standards with EU values such as transparency, accountability, and digital dignity. It supports safer, more trustworthy AI systems while reinforcing policy objectives in the AI Act and Cyber Resilience Act. This enables broader adoption and public trust.

Linkedin Profile

Open Call

Organisation type

Organization

Invited Adjunct Professor, AESTAS INSIGNIS - Investigação e Suportes de Apoio à Gestão, Unipessoal, Lda.

Organization website

Portrait Picture

Proposal Title (3rd Open Call)

AI & Cybersecurity Standards in Education: A Collaborative approach for Safer Learning Environments

Proposal Title (5th Open Call)

AI & Cybersecurity Standards in Education II (Project Continuation)

Blockchain for a Sustainable Future: Dual-Impact Standards for ESG and SDGs

Proposal Title (8th Open Call)

Taking the Micro-SME Voice into Securing Artificial Intelligence (SAI) Standardization Activities

ISO/TC 232 Education and learning services

ISO/IEC JTC 1/SC 42 Artificial intelligence

Standards Development Organisation

ISO

StandICT.eu Year

2026

Year

Topic (3rd Open Call)

Topic (5th Open Call)

Angie Qarry Jaegermann

Description of Activities

This technical report, resulting from my fellowship’s contributions, is an equitable analysis of the relationship between Quantum Key Distribution (QKD) and Post-quantum Cryptography (PQC) technologies. It describes the two technologies' complementary nature and highlights their potential advantages and benefits.

Fellow's country

Austria

Open Call Topics

Impact on SMEs (7th Open Call)

The development of this TR is significant to the European market, mainly because Europe is pushing very hard for the development of QKD while NIST favors PQC. NIST has marked QKD as a technology not to be adopted for cybersecurity, and some of these decisions might contradict the European Cybersecurity roadmap.
The European Commission also invests heavily in developing a QKD European Network and hybrid QKD-PQC protocol implementations, and the European Space Agency is involved in many free-space QKD communication projects.
The development of this standard is significant to the European market, mainly because Europe is pushing very hard for the development of QKD while NIST favors PQC.

Impact on society (7th Open Call)

My fellowship supports the creation of CEN/CENELEC/JTC22 WG4 working Items (WI) aiming to develop a Technical Report for QKD related technologies.
CEN/CLC/JTC 22/WG4/WI JT022002 (QKD and PQC - An equitable analysis) was accepted. Due to increased activity in the European Networks to implement hybrid cybersecurity protocols of QKD-PQC, the European Commission requested that the hybrid solutions should also be included in the existing WI JT022002, which currently analyses QKD and PQC separately. Therefore, the proposed activity in this application is an extension of the current WI Technical Report to cover the hybridization protocols.

Linkedin Profile

Open Call

OC#3 2026

OC#7 2026

Organisation type