
EARLY BIRD DEADLINE - register by 20th September 2026 to save with Early Bird Delegate Fees
Critical Infrastructure Protection & Resilience Europe brings together leading stakeholders from industry, infrastructure operators, agencies and governments to collaborate on securing Europe’s infrastructure. The conference will build on previous themes by deepening understanding of emerging threats and vulnerabilities, and by supporting the development and implementation of frameworks for risk-management, strategic planning and resilient operations.
The integrity of critical infrastructures and their reliable operation are vital for the welfare of citizens and for the functioning of our economy.
Learn about the importance of the updated NIS2 Directive…
The EU’s cybersecurity framework was significantly modernised with the NIS2 Directive (Directive (EU) 2022/2555), which entered into force on 16 January 2023.
The Directive expands the scope beyond the earlier 2016 measures, raising the level of ambition for cybersecurity across the Union, with clearer rules, stronger supervision and more sectors covered.
Member States were required to transpose the Directive into national law by 17 October 2024.
Covered entities now must implement robust risk-management and incident-notification measures, with legal liability and increased oversight.
Learn about the importance of the new CER Directive on the Resilience of Critical Entities…
The CER Directive (Directive (EU) 2022/2557) entered into force on 16 January 2023.
Member States must transpose its provisions into national law (deadline 17 October 2024) and adopt national strategies including risk-assessments, entity identification and resilience planning.
The Directive covers 11 key sectors (energy; transport; banking; financial market infrastructure; health; drinking water; wastewater; digital infrastructure; public administration; space; food production/processing/distribution) and mandates that Member States identify “critical entities” in each sector, define associated resilience obligations, and require these entities themselves to conduct risk assessments and implement security & organisational measures.
For entities operating across six or more Member States, additional EU-level support and coordination apply.
Why this discussion is timely and necessary
Under Article 196 of the Treaty on the Functioning of the European Union (Lisbon Treaty), the Union shall encourage cooperation among Member States to improve prevention, preparedness and response to natural or man-made disasters. The Union’s action includes:
(a) supporting & complementing Member States’ action in risk prevention, civil-protection personnel preparation and response;
(b) promoting swift operational cooperation between national civil-protection services;
(c) promoting consistency in international civil-protection work.
By aligning the NIS2 and CER Directives with this legal base, the EU establishes a strong regulatory backbone for both cyber and physical resilience of infrastructures and services critical to society and economy.
The ever changingnature of threats, whether natural through climate change, or man-made through terrorism activities, either physical or cyber-attacks, means the need to continually review and update policies, practices and technologies to meet these demands.

