The latest issue of Critical Infrastructure Protection & Resilience News (Autumn 2025) has arrived
News from IACIPP
The 2nd Critical Infrastructure Protection (CIP) Week in Europe and the 10th Critical Infrastructure Protection & Resilience Europe (CIPRE) conference concluded successfully in Brindisi, Italy, after three days of high-level discussions, collaboration, and innovation in securing Europe’s critical infrastructure.
Held from 14–16 October 2025, the joint event brought together senior policymakers, industry leaders, security professionals, and researchers from across Europe and beyond to accelerate collective resilience efforts and share strategies to address emerging threats to vital systems and services.
Organised under the theme “Resilience through Innovation & Collaboration,” the programme featured more than 50 international expert speakers focus on hot topic discussions, with live technical demonstrations, an industry exhibition, and policy roundtables focusing on the implementation of the EU Directives on Critical Entities Resilience (CER) and NIS2, cyber-physical risk management, maritime and energy resilience, supply-chain security, and climate adaptation for infrastructure.
The event was hosted by the City of Brindisi with support from CIP Week organisers, the International Association of Critical Infrastructure Protection Professionals (IACIPP) secretariat, and The International Emergency Management Society (TIEMS), in cooperation with European institutions, national agencies, and private-sector stakeholders.
A Milestone for European Critical Infrastructure Resilience
The 10th anniversary of CIPRE marked a decade of progress in building a shared European approach to protecting critical assets in energy, transport, communications, health, and digital sectors. The concurrent 2nd CIP Week in Europe strengthened awareness, training, and policy coordination among Member States.
Key Outcomes
Delegates highlighted several strategic outcomes and next steps for the resilience community:
• Cross-sectoral action: Agreement to accelerate national implementation of the CER and NIS2 Directives and to deepen public-private information sharing.
• Elevation of emerging risks: Recognition of AI/OT convergence, drone and UAS threats, supply-chain vulnerabilities, climate-driven hazards, and hybrid (cyber + physical) attack vectors.
• Operational collaboration: Launch of working groups to develop interoperable approaches for cyber-physical incident response and supply-chain resilience.
• Innovation pipeline: Demonstrations of operationally viable solutions for OT/ICS protection, resilient communications, and maritime safety, identified for follow-up pilots.
Strategic Significance and Future Outlook
As Europe faces intensifying hybrid and cyber threats, climate disruptions, and rapid technological change, the Brindisi conference outcomes serve as a catalyst for next-phase action, including:
• Accelerated rollout of CER- and NIS2-compliant frameworks across Member States;
• Expanded cross-border risk-assessment and resilience-planning partnerships; and
• Increased investment in cyber-physical protection, supply-chain resilience, and infrastructure adaptation.
Conference Chairman John Donlon added, “We are extremely grateful to all the people and organisations who have supported us and shared their knowledge, expertise, and enthusiasm. In particular, we thank the Mayor of Brindisi, Giuseppe Marchionna, and his team for hosting us in this fantastic city. We heard many insightful presentations by distinguished specialists and held great discussions on the pressing issues affecting international infrastructure and information communities. CIPRE remains the best place for the industry to meet, network, and share experiences.”
The International Association of CIP Professionals (IACIPP) is committed to the training and further education of industry professionals to enhance knowledge, expertise and ultimately improve industry standards. See our recommended useful training courses: https://www.cip-association.org/training-and-education/
Countering Insider Threats
Help2Protect is an eLearning Platform dedicated to Security and the Insider Threat courses help you put in place a detection and prevention program against this widespread and yet largely underestimated issue.
Further details: https://www.cip-association.org/help2protect-an-elearning-program-to-counter-insider-threats/
NIST Risk Management Framework
The purpose of these courses is to provide those new to risk management with an introduction to key publications associated with the NIST Risk Management Framework (RMF) methodology for managing cybersecurity and privacy risk.
Further details: https://csrc.nist.gov/Projects/risk-management/rmf-courses
The International Association of CIP Professionals (IACIPP) has appointed Frederic Petit, currently a Project Officer at the European Commission Joint Research Centre, as the Association’s ‘Liaison Director with the European Commission’.
Prior to his move to the European Commission JRC, Frederic was a Research Scientist specialising in critical infrastructure interdependencies and resilience at Argonne National Laboratory, and the Association’s representative for North America. With Mr Petit’s recent move to the JRC, he has been appropriately appointed as Association’s ‘Liaison Director with the European Commission’ with the role of industry/Commission liaison and keeping membership informed of the ongoing activities on the European activity/research around the protection and resilience of Infrastructure.
With the imminent implementation of The Critical Entities Resilience Directive (CER Directive), which lays down obligations on EU Member States to take specific measures to ensure that essential services and infrastructures, for the maintenance of vital societal functions or economic activities, are provided in an unobstructed manner in the internal market, and the NIS 2 Directive, also known as the Network and Information Security Directive, aimed at improving cyber security and protecting critical infrastructure across the European Union (EU), the appointment of Frederic is timely to aid with the outward facing communications and clarification of these important directives.
Compliance with the CER Directive and NIS2 Directive are crucial for businesses operating in the EU to safeguard their systems, mitigate threats, and ensure resilience, of which penalties are enforceable on agencies and operators for non-compliance.
John Donlon QPM, Chair of IACIPP, said, “We are delighted that Frederic has undertaken this new position within the Association. He was an excellent representative for us as our Regional Director in North America for a number of years, and his new role now in Europe will add real value at a time when there is significant change on the horizon in terms of regulations relating to national infrastructures”.
Frederic Petit will be presenting, on behalf of the European Commission JRC, at Critical Infrastructure Protection and Resilience Europe (www.cipre-expo.com) in Madrid, Spain, on 12th-14th November, part of the Association’s CIP Week in Europe, to raise greater awareness on the necessities of enhancing security and resilience of Europe’s critical infrastructures.