Cyber Security and Cyber Resilience for Space Tech Companies

Why Cyber Security matters for Space Tech Companies

The European space tech industry is facing a fundamental shift. New laws and regulations such as the Directive on Network and Information Security (NIS 2), the Critical Entities Resilience Directive (CER), and the Cyber Resilience Act (CRA) require not just technological adjustments – but a deeper legal and organizational transformation. The Cybersecurity Act, which re-established and expanded the mandate of the European Union Agency for Cybersecurity (ENISA), is another cornerstone which aims at increasing cybersecurity on the European level, affecting the well-known national cybersecurity frameworks. 

Cybersecurity is no longer a silo topic – it’s a cross-functional leadership task. Companies and individual managers/directors may suffer from significant fines if they do not comply with the legal and regulatory cybersecurity framework in the EU. Cybersecurity compliance has become a topic for the management, not just the IT department/experts.

In this interactive 1.5-day workshop, you will gain the legal and regulatory knowledge, practical methods, and professional exchange you need to address these new requirements in your company – and take concrete first steps towards their implementation.

WELCOME

The Unique Cybersecurity Landscape of the Space Industry

• Cybersecurity as a business-critical strategy
• Vulnerability, Threat, and Risk – Basic cybersecurity concepts
• Understanding the specific vulnerabilities and threats space tech companies are facing
• Case studies of past cyber incidents in the space sector

Understanding Your Assets and Risks

• Assessing critical infrastructures, critical entities, and critical products
• Identifying digital and tangible assets and potential vulnerabilities within a space technology or company

Overview on Legal and Technical Resources

• NIS 2, CER, CRA, EU Space Act – Current and future EU regulation
• Standards, technical recommendations, and relevant organizations (ECSS, ISO/IEC, NIST)

COFFEE BREAK

Deep-dive into Space

• Space-related legal requirements in the EU: NIS 2, CER, and CRA reloaded - in plain language and in context
• Additional requirements in national laws
• International considerations

LUNCH BREAK

Guidelines and Technical Recommendations for Space Systems

• ENISA framework
• Implementation by laws and technical recommendations on the national level

Mini-cases

• How regulations apply in daily business
• What cybersecurity regulations mean for different groups (procurement, R&D, IT, legal, and management)

COFFEE BREAK

Supply Chain and Value Chain

• Interactive mapping: identifying supply chain vulnerabilities along the value chain

Cyber Resilience Strategies

• Building the ability to withstand and recover from cyberattacks, ensuring business continuity and operational resilience
• Developing comprehensive incident response plans
• Business continuity planning (BCP) and disaster recovery (DR) strategies for space infrastructure
• Data backup and recovery procedures for critical space data

WRAP-UP & Q&A

RECAP OF DAY1

Cybersecurity Policy

• Cybersecurity Policy Canvas: a guided tool for structured planning
• Feedback and policy refinement
• Practical guidance on implementing a cybersecurity strategy

COFFEE BREAK

Threat Intelligence and Vulnerability Management

• Proactive measures for identifying and mitigating threats and vulnerabilities
• Implementing core and advanced cybersecurity measures
• Regular reviews/assessments and audits

Emerging Threats and Future Trends

• Cybersecurity implications of increasing satellite constellations and interconnectedness
• The role of AI and ML in both attacks and defence in the space context
• Quantum computing and its potential impact on encryption used in space systems

WRAP-UP & Q&A

LUNCH & CLOSING

Professionals and leaders with responsibility for or connection to cybersecurity – including CISOs, procurement leads, legal counsels, project managers, and executives. 

Especially relevant for

• Space tech start-ups, scale-ups, and established companies expanding their business into space 
• Suppliers and component manufacturers in the space industry 
• Operators of critical infrastructure or ground systems
• Managers, directors, decision-makers, and professionals in IT, procurement, operations, legal, or leadership roles

• A structured overview of key EU regulations, including NIS2, CER, and CRA
• Introduction to guidelines and technical recommendations for space systems
• Interactive tools: value chain mapping and a cybersecurity policy canvas
• Peer exchange with experts and leaders from the space tech ecosystem