From 25 January to 3 February, representatives from partner companies worldwide gathered virtually for the Charter of Trust’s first Collaboration Week of 2021 to continue growing the strategic outlook of the Charter of Trust, more than three years after its creation. This virtual Collaboration Week was characterized by vibrant and insightful presentations from global cybersecurity experts.
Charter of Trust members benefitted from insights by global cybersecurity experts
Amidst a global pandemic, public and private organizations around the globe have witnessed a sharp rise in online scams such as COVID-19 phishing emails. The SolarWinds hack underlined the importance of increasing cybersecurity efforts across all sectors. Collaboration and knowledge exchange are key pathways for the industry and other organizations to share best practices and collectively raise resilience against a growing and complex threat landscape.
Over the course of two weeks filled with working sessions and discussion rounds, Charter of Trust Partners met in taskforces each dedicated to one of the 10 Principles. The Principle Taskforces active during this Collaboration Week were Principle 2 “Responsibility throughout the digital supply chain”, Principle 3 “Security by default”, Principle 6 “Education”, Principle 7 “Certification for critical infrastructure and solutions”, and Principle 8 “Transparency and response”. The Principle Taskforces took stock of the work done since the previous Collaboration Week in June 2020 and set concrete objectives for the coming months leading toward the 2021 Munich Security Conference.
The Charter of Trust also convened its Associated Partner Forum (APF) to discuss ongoing developments and cooperation initiatives with its Associated Partners. The APF this time was joined by Germany’s Federal Office for Information Security, the Canadian Centre for Cyber Security, the Hasso Plattner Institute, Japan’s Ministry of Internal Affairs and Communications, and TU Graz.
In addition, keynote speeches from an impressive array of high-level experts in the field of cybersecurity were highlights of the Collaboration Week that sparked discussions within the taskforces on the various challenges and opportunities the industry is currently facing. The Charter of Trust was pleased and honoured to host:
- Scott Jones, Head of the Canadian Centre for Cyber Security
- Atsushi Umino, Director, Office of the Director-General for Cybersecurity, Ministry of Internal Affairs and Communications (MIC) of Japan
- Jakub Boratyński, Head of Unit for Cybersecurity and Digital Privacy, DG CNECT, European Commission
- Regine Grienberger, German Ambassador for Cyber Foreign Policy, German Federal Foreign Office
- Kiersten E. Todt, Managing Director of the Cyber Readiness Institute
- Raphael Yahalom, Research Affiliate, MIT Sloan School of Management
- Alexandre Dulaunoy and Andras Iklody, Computer Incident Response Center Luxembourg (CIRCL)
- Patrick Steinmetz, Cyber Risk Assessment Expert at BitSight Technologies
- Dmitry Raidman and Evgeniy Kharam, Co-Founders of the Security Architecture Podcast
The second virtual Collaboration Week of the Charter of Trust enabled an even closer collaboration among partners and exchanges with high-level external speakers through different sectors and time zones. After the success of Charter of Trust roadshows and webinars in 2020, additional online events are being planned to further advance the synergetic nature of the initiative, starting with the Brussels Roadshow on 25 February.
PREVIOUS POST
New Chairwoman for the Global External Engagement Group
NEXT POST
Decrypting the Future: Global Timelines for PostQuantum Cryptography and why they matter
You may also like
Post-Quantum Cryptography
Decrypting the Future: Global Timelines for PostQuantum Cryptography and why they matter
The transition to post-quantum cryptography is not a future problem — it is a present one. The threat of adversaries harvesting encrypted data today for decryption once quantum computing matures means that organizations with long-lived data and systems are already exposed. Waiting for cryptographically relevant quantum computers to arrive before acting is not a viable risk management strategy.
Exposure is not uniform across sectors. Financial services, government and defense, operational technology, and healthcare face the sharpest quantum risk, driven by decades-long data retention obligations, slow system replacement cycles, and the societal consequences of cryptographic failure. For these sectors, PQC readiness has moved from best practice to strategic imperative.
Globally, the direction of travel is clear. The United States, European Union, United Kingdom, Singapore, and Australia have each established structured PQC transition frameworks, with mandatory deadlines converging around the late 2020s and 2030. Organizations operating across jurisdictions should expect compounding compliance requirements and align migration plans accordingly.
At the same time, the geopolitical dimension of PQC standardization is becoming increasingly salient. The emergence of a “splinternet” infrastructure, characterized by regionally fragmented digital ecosystems, suggests that cryptographic standards diverge along political and strategic lines. As a result, organizations must not only manage technical migration but also navigate a politically charged landscape in which interoperability, regulatory alignment, and long-term cryptographic agility become critical strategic considerations.
This paper offers a comparative overview of regional PQC transition frameworks and identifies the business and systemic risks associated with quantum-vulnerable cryptography, providing insights for organizations preparing for the transition to post-quantum cryptography. Overall, PQC migration is a strategic transformation, not a technical patch. Cryptographic inventory, governance structures, crypto-agility, and supply chain engagement are as central to success as algorithm selection — and organizations that treat PQC readiness as an architectural and organizational challenge will be best positioned as quantum risks continue to mature.
Exposure is not uniform across sectors. Financial services, government and defense, operational technology, and healthcare face the sharpest quantum risk, driven by decades-long data retention obligations, slow system replacement cycles, and the societal consequences of cryptographic failure. For these sectors, PQC readiness has moved from best practice to strategic imperative.
Globally, the direction of travel is clear. The United States, European Union, United Kingdom, Singapore, and Australia have each established structured PQC transition frameworks, with mandatory deadlines converging around the late 2020s and 2030. Organizations operating across jurisdictions should expect compounding compliance requirements and align migration plans accordingly.
At the same time, the geopolitical dimension of PQC standardization is becoming increasingly salient. The emergence of a “splinternet” infrastructure, characterized by regionally fragmented digital ecosystems, suggests that cryptographic standards diverge along political and strategic lines. As a result, organizations must not only manage technical migration but also navigate a politically charged landscape in which interoperability, regulatory alignment, and long-term cryptographic agility become critical strategic considerations.
This paper offers a comparative overview of regional PQC transition frameworks and identifies the business and systemic risks associated with quantum-vulnerable cryptography, providing insights for organizations preparing for the transition to post-quantum cryptography. Overall, PQC migration is a strategic transformation, not a technical patch. Cryptographic inventory, governance structures, crypto-agility, and supply chain engagement are as central to success as algorithm selection — and organizations that treat PQC readiness as an architectural and organizational challenge will be best positioned as quantum risks continue to mature.
Read more
April 07, 2026
•
Post-Quantum Cryptography
A Quantum Leap for Cybersecurity: The Charter of Trust’s PQC Ambition
The Charter of Trust is taking decisive steps to secure our digital future in the quantum era. As quantum computing advances, the risks to today’s cryptographic systems grow ever more urgent. Our dedicated working group is leading the way in raising awareness, promoting standards-based migration, and fostering collaboration across industries, governments, and academia. Together, we are committed to a proactive, well-coordinated, and risk-driven transition to post-quantum cryptography—ensuring digital trust and resilience for generations to come. Discover our vision and join us as we shape a secure digital world for the quantum age.
Read more
November 03, 2026
•
Artificial Intelligence
Read the Charter's contribution to the European Commission's public consultation on the Digital Omnibus Package
The rapid expansion of EU digital regulation has strengthened security, privacy, and trust, but it has also created overlapping obligations, inconsistent timelines, and administrative complexity. The Digital Omnibus Package provides a timely opportunity to streamline these rules, ensure greater coherence, and enable businesses to focus resources on resilience and innovation rather than redundant compliance tasks.
The Charter of Trust welcomes the Commission’s initiative to harmonize digital regulations across the EU, aiming to reduce administrative burdens while maintaining high standards of security and privacy. Representing the unified views of its Partners, this paper addresses all key legislation within the scope of the Digital Omnibus and offers comprehensive recommendations. It emphasizes the need for a unified incident reporting system, risk-based notification requirements, and fair compliance processes to minimize regulatory overlap. The Charter calls for clearer liability clauses, global recognition of certifications, and stronger supply chain security.
In data regulation, the Charter advocates ensuring alignment between the rules on data intermediation services under the DGA and B2B data sharing under the Data Act and extending exemptions to mid-cap companies, all while safeguarding trade secrets. For artificial intelligence, the paper recommends a phased approach to new requirements, integrated conformity assessments, harmonized compliance templates, and clear definitions, supported by sector-specific guidance and transparent AI categorization. The Charter also encourages the European Commission to ensure that ePrivacy reform is future-proof, fosters innovation, and reflects the needs of both businesses and consumers. Finally, it recommends robust security standards and cross-border recognition for the EU Business Wallet, with industry involvement in technical standards and integration with data access systems.
Collectively, these measures are designed to foster innovation, resilience, and trust in the EU’s digital landscape, allowing businesses to thrive in a coherent and future-ready regulatory environment.
The Charter of Trust welcomes the Commission’s initiative to harmonize digital regulations across the EU, aiming to reduce administrative burdens while maintaining high standards of security and privacy. Representing the unified views of its Partners, this paper addresses all key legislation within the scope of the Digital Omnibus and offers comprehensive recommendations. It emphasizes the need for a unified incident reporting system, risk-based notification requirements, and fair compliance processes to minimize regulatory overlap. The Charter calls for clearer liability clauses, global recognition of certifications, and stronger supply chain security.
In data regulation, the Charter advocates ensuring alignment between the rules on data intermediation services under the DGA and B2B data sharing under the Data Act and extending exemptions to mid-cap companies, all while safeguarding trade secrets. For artificial intelligence, the paper recommends a phased approach to new requirements, integrated conformity assessments, harmonized compliance templates, and clear definitions, supported by sector-specific guidance and transparent AI categorization. The Charter also encourages the European Commission to ensure that ePrivacy reform is future-proof, fosters innovation, and reflects the needs of both businesses and consumers. Finally, it recommends robust security standards and cross-border recognition for the EU Business Wallet, with industry involvement in technical standards and integration with data access systems.
Collectively, these measures are designed to foster innovation, resilience, and trust in the EU’s digital landscape, allowing businesses to thrive in a coherent and future-ready regulatory environment.
Read more
October 14, 2025
•
