{"id":67636,"date":"2026-11-12T16:29:12","date_gmt":"2026-11-12T15:29:12","guid":{"rendered":"https:\/\/www.secuinfra.com\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/"},"modified":"2026-11-12T16:29:15","modified_gmt":"2026-11-12T15:29:15","slug":"tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements","status":"publish","type":"post","link":"https:\/\/www.secuinfra.com\/en\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/","title":{"rendered":"TISP Community Meeting 2026: Cyber Defense Requires More Than Just Compliance with Requirements"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-flat ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">[inhalt_uebersetzt]<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.secuinfra.com\/en\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/#Understanding_Regulation_Shaping_Security\" >Understanding Regulation, Shaping Security<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.secuinfra.com\/en\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/#Effective_defense_starts_in_the_workplace\" >Effective defense starts in the workplace<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.secuinfra.com\/en\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/#Security_Requires_a_Willingness_to_Change\" >Security Requires a Willingness to Change<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.secuinfra.com\/en\/news\/tisp-community-meeting-2026-cyber-defense-requires-more-than-just-compliance-with-requirements\/#AI_Jointly_Developing_Defense_Capabilities_and_Responsibility\" >AI: Jointly Developing Defense Capabilities and Responsibility<\/a><\/li><\/ul><\/nav><\/div>\n\n<p class=\"wp-block-paragraph\"><strong>158 in-person participants, over 100 remote attendees, and two days full of insights: At the T.I.S.P.\/T.P.S.S.E. Community Meeting 2026, regulatory responsibility met operational security practices. For us at SECUINFRA, one question took center stage: How do requirements, technologies, and insights translate into effective cyber defense capabilities?<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\">On November 10 and 11, TeleTrusT hosted this year\u2019s Community Meeting at the NH Collection Berlin-Mitte. The event brings together certified information security experts and combines professional exchange with recognized continuing education. The perspectives represented ranged from public organizations and the BSI to insurance companies and the defense industry, as well as the business sector and research. This diversity made the exchange particularly valuable: different operational contexts came together to address common challenges.<\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Understanding_Regulation_Shaping_Security\"><\/span>Understanding Regulation, Shaping Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n<p class=\"wp-block-paragraph\">Attorney Karsten U. Bartels kicked off the event with his update on IT security law. His remarks on NIS-2 and issues of interpretation in the BSIG underscored how crucial it is to conduct a thorough assessment of one\u2019s own exposure and obligations. At the same time, new guidelines for executive training emphasized that cyber risks must be understood and managed at the executive level.<\/p>\n\n<p class=\"wp-block-paragraph\">The Cyber Resilience Act has also brought the security of digital products into focus. The EU regulation establishes requirements for products with digital elements and the management of their vulnerabilities. Its key obligations take effect on December 11, 2027; certain reporting requirements have been in effect since September 11, 2026. As a result, security throughout the product lifecycle is becoming increasingly important for procurement and supplier management as well.<\/p>\n\n<p class=\"wp-block-paragraph\">Marcel Al-Mosawi of SVA added the operational perspective: Compliance lays an important foundation. Cyber resilience emerges when companies combine it with best practices and consistent implementation. For us, this was a central theme of the event: The value of a security measure is demonstrated by the protection it actually provides in everyday operations.<\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Effective_defense_starts_in_the_workplace\"><\/span>Effective defense starts in the workplace<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n<p class=\"wp-block-paragraph\">The presentations on security operations were particularly practical. Thomas Stasch discussed the detection methods and workflows of a SOC. Stefan Haibach and Philipp Rothmann from ITSG shared their experiences from the implementation of a managed SOC using an Elastic-based SIEM solution. The presentations offered valuable insights into how technology, processes, and responsibilities must work together.<\/p>\n\n<p class=\"wp-block-paragraph\">Oliver Falkenthal of CCVOSSEL drew attention to an often-underestimated risk: service accounts. Excessive permissions and long-lived passwords can create significant vulnerabilities. The countermeasures discussed ranged from separate administration levels and restricted login options to automated password management using managed service accounts.<\/p>\n\n<p class=\"wp-block-paragraph\">Stephan Weller\u2019s insights into OT security at Wacker Biotech and Johannes Klick\u2019s contribution on the external perspective on organizations also demonstrated how important complementary perspectives are. Publicly available information and insights from the dark web can reveal risks that internal analyses alone might overlook.<\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Security_Requires_a_Willingness_to_Change\"><\/span>Security Requires a Willingness to Change<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n<p class=\"wp-block-paragraph\">Nicole Adloff and Alexandra Palandrani from Securenication made it clear why \u201csecurity by design\u201d is also a communication challenge. Development, information security, and management pursue different goals. Secure solutions emerge when these perspectives are brought together early on. Kai Jendrian\u2019s presentation on information security beyond established ways of thinking complemented this discussion.<\/p>\n\n<p class=\"wp-block-paragraph\">Silas Borgmeier of AWARE7 demonstrated that change can be shaped in concrete terms by detailing the roughly one-and-a-half-year journey toward greater cloud independence. Alternatives such as OpenProject, BookStack, and Nextcloud Talk illustrated the possibilities. At the same time, it became clear that digital sovereignty requires a careful migration across numerous interconnected services.<\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"AI_Jointly_Developing_Defense_Capabilities_and_Responsibility\"><\/span>AI: Jointly Developing Defense Capabilities and Responsibility<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n<p class=\"wp-block-paragraph\">AI was a cross-cutting theme throughout both days: from the Model Context Protocol in Thomas Hemker\u2019s presentation to prompt hacking in Marco Di Filippo\u2019s talk, and on to shadow AI and data leakage in Aurea Kindshofer\u2019s presentation. For us, this crystallized into a clear call to action: Companies should harness the potential of AI for their cyber defense while simultaneously establishing binding rules for its secure use. A culture of AI in practice, clear responsibilities, and systematic AI management go hand in hand.<\/p>\n\n<p class=\"wp-block-paragraph\">Felix Rosbach expanded on the human dimension by addressing psychological safety, whistleblower protection, and phishing awareness. Technical safeguards become more effective when employees can address concerns and potential incidents early on.<\/p>\n\n<p class=\"wp-block-paragraph\">We\u2019re taking valuable insights from Berlin back with us for cyber defense that combines regulatory responsibility, operational effectiveness, and corporate culture. We would like to thank TeleTrusT, the speakers, and the entire community for two intensive days filled with expert knowledge and open discussions. This exchange reinforces what organizations need today: the ability to assess risks thoroughly and take effective action when it counts most.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-scaled.jpeg\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1600\" height=\"1200\" data-id=\"67632\" src=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-1600x1200.jpeg\" alt=\"\" class=\"wp-image-67632\" srcset=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-1600x1200.jpeg 1600w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-800x600.jpeg 800w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-768x576.jpeg 768w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-1536x1152.jpeg 1536w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0088-1-2048x1536.jpeg 2048w\" sizes=\"(max-width: 1600px) 100vw, 1600px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-scaled.jpeg\"><img decoding=\"async\" width=\"1600\" height=\"1200\" data-id=\"67633\" src=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-1600x1200.jpeg\" alt=\"\" class=\"wp-image-67633\" srcset=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-1600x1200.jpeg 1600w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-800x600.jpeg 800w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-768x576.jpeg 768w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-1536x1152.jpeg 1536w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0091-2048x1536.jpeg 2048w\" sizes=\"(max-width: 1600px) 100vw, 1600px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-scaled.jpeg\"><img decoding=\"async\" width=\"1600\" height=\"1200\" data-id=\"67631\" src=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-1600x1200.jpeg\" alt=\"\" class=\"wp-image-67631\" srcset=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-1600x1200.jpeg 1600w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-800x600.jpeg 800w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-768x576.jpeg 768w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-1536x1152.jpeg 1536w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0090-1-2048x1536.jpeg 2048w\" sizes=\"(max-width: 1600px) 100vw, 1600px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-scaled.jpeg\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"1600\" data-id=\"67630\" src=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-1200x1600.jpeg\" alt=\"\" class=\"wp-image-67630\" srcset=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-1200x1600.jpeg 1200w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-600x800.jpeg 600w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-768x1024.jpeg 768w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-1152x1536.jpeg 1152w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-1536x2048.jpeg 1536w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_0087-1-scaled.jpeg 1920w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-scaled.jpeg\"><img loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"1600\" data-id=\"67629\" src=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-900x1600.jpeg\" alt=\"\" class=\"wp-image-67629\" srcset=\"https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-900x1600.jpeg 900w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-450x800.jpeg 450w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-768x1365.jpeg 768w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-864x1536.jpeg 864w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-1152x2048.jpeg 1152w, https:\/\/www.secuinfra.com\/wp-content\/uploads\/IMG_4960-scaled.jpeg 1440w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/><\/a><\/figure>\n<\/figure>\n","protected":false},"excerpt":{"rendered":"<p>158 in-person participants, over 100 remote attendees, and two days full of insights: At the T.I.S.P.\/T.P.S.S.E. Community Meeting 2026, regulatory responsibility met operational security practices. For us at SECUINFRA, one question took center stage: How do requirements, technologies, and insights translate into effective cyber defense capabilities?<\/p>\n","protected":false},"author":33,"featured_media":67637,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"dpc_author_order":[],"footnotes":""},"categories":[791,60],"tags":[774],"class_list":["post-67636","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-resilience","category-news","tag-cybersecurity-trends-en-2"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/posts\/67636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/comments?post=67636"}],"version-history":[{"count":1,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/posts\/67636\/revisions"}],"predecessor-version":[{"id":67639,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/posts\/67636\/revisions\/67639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/media\/67637"}],"wp:attachment":[{"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/media?parent=67636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/categories?post=67636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.secuinfra.com\/en\/wp-json\/wp\/v2\/tags?post=67636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}