Jerez de la Frontera, Spain – February 2026
SAFE4SOC was presented to the European CSIRT community during TF-CSIRT 76 and the Regional Symposium Europe 2026, held in Jerez de la Frontera, Spain, in February 2026.
The event was organised by TF-CSIRT, one of Europe’s key communities for cooperation between Computer Security Incident Response Teams (CSIRTs). The meeting brought together approximately 160 participants representing national, sectoral, governmental, academic, and private-sector teams from across Europe.During the event, a dedicated presentation introducing the SAFE4SOC project was delivered, outlining its objectives, technical approach, and progress in structured alert exchange and interoperability.
“IDMEFv2 update: how SOC’s alerts could be aggregated in national/sectorial SOCs”
The presentation received immediate and positive feedback from participants, appreciation that the IDMEF-based standardisation work is actively progressing again, recalling earlier versions of the standard, leading towards discussions focused on practical challenges in reporting standards, particularly the codification of non-standard elements and the need for precise definitions when handling complex or edge-case reporting requirements.
These exchanges demonstrated both historical awareness of IDMEF in the community and the continued relevance of structured incident reporting in today’s SOC environments. Participation in TF-CSIRT 76 and the Regional Symposium Europe represents an important dissemination milestone for SAFE4SOC. The audience composed of experienced CSIRT professionals provided a technically informed environment for discussing interoperability, reporting standards, and SOC aggregation models. Such engagements supports SAFE4SOC’s broader objective of contributing to secure, standardised, and interoperable information sharing across heterogeneous SOC and CSIRT ecosystems.
About SAFE4SOC
SAFE4SOC is a European research and innovation project focused on improving interoperability, structured alert exchange, and controlled information sharing among Security Operations Centres (SOCs). The project explores IDMEFv2-based approaches, gateway architectures, and analyst-centred analytics to support coordinated cybersecurity operations across organisational and sectoral boundaries.
More information:
https://safe4soc.eu
Follow SAFE4SOC on LinkedIn:
https://www.linkedin.com/company/safe4soc/
