Overlapping and unclear requirements for reporting cyber incidents across several EU-level policies and between different countries pose significant operational and compliance challenges for entities under scope. In some cases, organisations are required to notify several national bodies of the same cyber incident.
European Cyber Security Organisation
NGO · Belgium · EU Transparency Register 684434822646-91
Counts here are a floor, never a total: they cover the 665 consultation files tracked so far (57,800 submissions, mostly 2021–26), so an organization's real filing history is larger, not smaller.
Who they are
Among the 1107 non-governmental organisations on this site, they rank #342 by legislative files engaged, a count of participation, not a measure of influence.
Declares membership of
- we are not member of any other association - federation or network
Self-declared to the EU Transparency Register (snapshot 15 Oct 2026).
- Register category
- Non-governmental organisations
- Head office
- Bruxelles, Belgium
Self-declared to the EU Transparency Register (snapshot 15 Oct 2026); cost bands are floors, not audited totals. Reused under Commission Decision 2011/833/EU.
Track European in PolicySpeak: request access →
Work at European Cyber Security Organisation? so we know who speaks for it.
Their record over time
European Cyber Security Organisation filed 4 positions between 24 May 2022 and 29 Apr 2026, across 4 of the 665 legislative files tracked here, attaching a full position paper 3 times.
What they argued
The proposals to revise the Cybersecurity Act and amend the NIS2 Directive enhance the foundations of the European cybersecurity policy architecture, with the objectives of fostering legal certainty, reducing fragmentation, and strengthening cybersecurity governance across the Union.
Please find attached the contribution of the European Cyber Security Organisation (ECSO). The European Cyber Security Organisation (ECSO) is a non-for-profit organisation, established in 2016 to support the Public – Private Partnership on cybersecurity with the European Commission.
On top of the specific comments in the attachment, some of our members raised questions concerning whether the draft implementing regulation should clarify if a product might full under more than one category. In addition, could we confirm that: - Industrial Automation and Control Systems (i.e. PLC, SCADAS) - industrial IEDs, such as, relays and actuators for smart grids Are falling under default products?
Looking for an argument rather than an organization? Search every submission for a phrase and see everyone who used it.
Put European Cyber Security Organisation next to another organization. Same files, same register facts, side by side. Compare →
Turns up on the same files
Organizations that also filed on at least two of the same consultations. A shared interest in the same dossiers, not evidence of coordination, and we do not suggest any.
Showing 5 of 154.
Is this your organization?
Everything on this page comes from European Cyber Security Organisation’s own submissions to the European Commission. We have added nothing and interpreted nothing. If something is wrong or out of date, email info@policyspeak.com and we will correct it. If you are an individual named in a record, our privacy policy sets out your rights to correction, objection and removal.
Quotes are verbatim from submissions published by the European Commission, trimmed to their opening passage and never summarized by a model. Organizations only, never individuals. Reused under Commission Decision 2011/833/EU; the European Commission is not liable for this reuse.