Summary

  • ECCC reports around 110 participants from more than 60 companies and organisations in 24 European countries at its 20 October Community Day, with over 60 one-to-one matchmaking meetings.
  • Its Strategic Advisory Group was given an indicative Q1 2026 start in the application call. The Governing Board approved a proposed member list in October; ECCC said the group “will be set up,” but its public pages list no members or first meeting date.
  • The advisory group can feed expertise into priorities and work programmes. The Governing Board retains the decisions.

Sixty meetings fit neatly in a press release

The European Cybersecurity Competence Centre gave its first Community Day a crisp set of numbers. On 20 October, within the Bucharest Cybersecurity Conference, around 110 participants from more than 60 companies and organisations came from 24 European countries. ECCC says the day produced more than 60 one-to-one meetings through networking and matchmaking, alongside pitches from community members.

Those are useful outputs. A buyer can meet a research team; a national coordination centre can find a project partner; a small company can learn which programme is worth chasing. ECCC describes the meetings as opportunities for future partnerships, projects and investment. The distinction between an opportunity and an awarded project is plain in the Centre’s own wording.

The governance question starts one level above the meeting table: who is meant to carry community expertise into the Centre’s continuing choices?

The formal advice channel ran behind the event calendar

ECCC opened its Strategic Advisory Group call in November 2025. The call sought up to 20 members for two-year terms, renewable once, and required at least three meetings a year. It gave the term an indicative starting date of Q1 2026. The application deadline was later extended to 15 January.

The Governing Board and National Coordination Centre network met in Cyprus on 13–15 October. In its 16 October account, ECCC said the Board had approved a proposed list of Strategic Advisory Group members and that the group “will be set up.” The first Community Day followed on 20 October. ECCC’s 26 October event report listed participants and meetings, but no advisory-group names, first meeting, or advice delivered.

The current governance page explains the group’s composition and remit but publishes no roster or first-meeting date. The Board page lists 2026 decisions and minutes but has no October meeting record or public appointment document. Readers can see that a proposed list passed the Board; they cannot yet see who is on it or when the group begins its work.

A community day and a statutory adviser do different jobs

The Strategic Advisory Group is one of ECCC’s three governance bodies. Its call says it should provide continuing advice to the Executive Director and Governing Board on the Strategic Agenda and annual and multiannual work programmes. It can also organise public consultations, subject to Board approval. The Governing Board appoints the members from the Cybersecurity Competence Community; the Executive Director proposes the list.

That is not a second Governing Board. The Board adopts the annual work programme. The call also says appointments are made “ad personam”: members serve in their own capacity, not as delegates of their employer or a particular interest. A room of 110 can build contacts. The formal group is the channel for continuing advice, with named people and a defined schedule.

ECCC has shown that it can convene the community and count the resulting meetings. The next public receipt should make the advisory channel equally inspectable: the appointed roster, the start of the term, a first meeting date and the route by which advice reaches a Board decision. The call pointed to Q1; the October update came after that window, and ECCC has not explained the gap.

Sources