Panel Discussion: Powering Cybersecurity Through Data: Luxembourg’s Vision in Action
Luxembourg has set out a holistic vision, guiding principles and concrete actions to make data, AI and quantum technologies support economic growth and sustainability, through the Luxembourg Data, AI and Quantum strategies 2030.

In order to operationalise this strategy, the Luxembourg House of Cybersecurity, through its Luxembourg Cybersecurity Factory, is coordinating the national Cybersecurity Flagship project and is establishing the first Open Cybersecurity Data Space in Europe. Such a data space fosters synergies by facilitating the collection and exchange of cybersecurity-related data like threat intelligence, vulnerabilities, and efficiency of protective measures and is indispensable for the creation of new autonomous cybersecurity tools that SMEs can afford.
What are the ambitions and challenges faced? Let’s hear the insights from the various actors involved.

Expected outcome: Participants will gain practical insights into how the Open Cybersecurity Data Space can enable trusted data sharing, improve threat intelligence and support the development of affordable cybersecurity solutions for SMEs. They will leave with a clearer understanding of the key requirements, stakeholder roles and next steps needed to make the data space operational and impactful.

Panel discussion: The role of open source and cyber commons for preparing for regulatory compliance.

The EU AI Act introduces regulatory sandboxes (Articles 57–59) to help organisations develop, test and validate innovative AI under supervision before market entry. This panel asks how open source and the emerging cyber commons can make this bridge between innovation and compliance more accessible, especially for SMEs, startups, researchers and public bodies.

Bringing together regulators, standardisation and cybersecurity actors, and open-source practitioners, the discussion will explore how shared assets such as datasets, testing tools, reference implementations and conformity-assessment know-how can reduce compliance barriers, and how sandboxes and open commons can reinforce each other: sandboxes provide supervised spaces to experiment, while the commons provides reusable building blocks.

Key questions include: What can a cyber commons realistically offer organisations preparing for AI Act compliance? Where does open source strengthen trust, reproducibility and auditability and where are its limits? How can sandboxes, standards and open commons ensure that lessons learned become shared resources? And how should Europe’s strategic autonomy agenda shape what is built collectively versus procured?

Expected outcome: Attendees will leave with a concrete picture of how open-source tooling and a cyber commons can shorten the path to regulatory readiness, practical entry points for participating in or contributing to these resources, and an understanding of how sandboxes and the commons fit within the broader EU standardisation and compliance landscape.

A guided walkthrough of the Luxembourg Cybersecurity Cyber Commons Office offering and a live look at the Cyber Data Space — its industrialised open data access, ready-to-use ETL-processed datasets and the Cybersecurity Data Lab — followed by structured feedback: what works, what is missing, which data assets and services create most value, and what would lower the barrier to adoption for SMEs, researchers and the community. Output: a prioritised feedback backlog and a shortlist of desired data assets and improvements. The outputs will be published under an open licence, in the spirit of the conference.
Format (4 groups): Cybersecurity Data, AI HUB assets, Cybersecurity testing of AI systems, Open Tools for cybersecurity

With humanitarian and international actors in the conference community, this session co-creates a vision and wish-list for a Humanitarian Cyber Commons — shared, open and trustworthy data, tools and AI capabilities that help protect vulnerable populations and the organisations serving them — and turns it into a high-level, preliminary and non-committing roadmap of deliverables. Together, participants collect needs against guiding principles (strategic autonomy, neutrality, data protection, digital dignity), and identify candidate use cases and potential partners to join.

The roadmap is structured around two inputs: (a) the requirements and requests received from stakeholders, and (b) the deliverables already foreseen within our established Luxembourg Cybersecurity Factory Cyber Commons work programme.
The session then invites the audience to say what is missing from the roadmap and, realistically, in what timeline each item is genuinely needed — "yesterday" not being an accepted answer.

Output: white paper (Chatam house rules), to be distributed to the participants only, including a draft vision statement, a prioritised wish-list, and candidate use cases and partnerships.