During the conference, participants had the opportunity to see SIEMBIOT in action through a live demonstration delivered by Tiberiu Baraboi, CEO of Expertware and project coordinator. The demonstration showcased the components developed within the platform, as well as tools for assessing cybersecurity maturity against NIS2 requirements.

The demonstration also highlighted how the capabilities developed through SIEMBIOT help transform collected data into relevant information for identifying and managing threats. Continuous monitoring, alert investigation and triage, logging, vulnerability identification, and security testing provide organisations with a broader view of their infrastructure and enable them to understand an event quickly enough to take action.

The first panel, “From Cyber Intelligence to Cyber Policy”, brought together Andi Mihai (DNSC), Raluca Anton (Deloitte), Alexandru Georgescu (ICI Bucharest), Ioana Manea (Cyber Arena), Alexandru Șerbănescu (ELI-NP), and Viorel Manole (PATROMIL) for a discussion on policy, skills, research, and organisational responsibility.

One of the main conclusions was that cyber resilience should not be confused with compliance alone. A successful audit does not automatically demonstrate that an organisation can continue operating during an incident.

The relevant question is a practical one: if an attack happens on Sunday evening, can essential services still be delivered on Monday morning?

To answer this question, organisations need to know which systems are critical, how much loss they can tolerate, and how quickly those systems need to be recovered. Backups, response plans, and recovery mechanisms need to be tested regularly, not only before an audit or after an incident has occurred.

Technology alone, however, does not create resilience. A security tool needs to be properly configured, monitored, and integrated into effective processes, while a backup is only useful if the data can actually be restored when needed. The same principle applies to compliance: security cannot be assessed once and then considered resolved.

Requirements such as those introduced by NIS2 call for a continuous approach, in which asset inventories, vulnerabilities, risks, and controls are monitored and reassessed as infrastructure and threats evolve.

Beyond internal processes, resilience also depends on organisations’ ability to learn from one another. The conference highlighted the importance of sharing information about incidents and anomalies, particularly in a context where organisations often use the same technologies and face similar threats. The experience gained from one incident can therefore become a valuable source of learning for the wider community.

Reflecting on three years of development and the project’s results, Tiberiu Baraboi, CEO of Expertware, summarised what SIEMBIOT has meant for the team:

“SIEMBIOT is a dream come true. A company from Romania can achieve great things. We want to secure AI, and we want you to hear about Expertware ten years from now, wherever you are in the world.”

SIEMBIOT is completing its implementation period as a European project, but the technology, expertise, and collaborations developed through it are entering a new stage. The next steps focus on building on the results achieved, further developing the platform, and establishing new collaborations across the national and European cybersecurity ecosystem.

Attacks are becoming faster, infrastructures more complex, and organisations are having to manage ever-growing volumes of information. In this context, resilience is not measured by the number of tools deployed or the requirements checked off during an audit, but by the ability to understand what is happening, respond in time, and keep operating when something critical stops working.