Luxembourg GRC Summit 2026 - 2 days of intense conversations
On 3 & 4 June 2026, the National Cybersecurity Competence Center (NC3), in collaboration with the Luxembourg Cybersecurity Factory (LCSF), organised its annual Luxembourg GRC Summit. This year's edition focused on "Navigating Cyber Governance in the Age of AI".
Almost 300 participants gathered at the Luxembourg Chamber of Commerce, coming from the Greater Region and further away (Italy, the Netherlands, the UK, South-Korea, Japan, Quebec, ...). Private and public sectors, academia and humanitarian organisations were present to share their views during dedicated forum sessions.
The NC3 and the LCSF were delighted to welcome distinguished speakers, such as Prof. James Harold Davenport from the University of Bath, sharing with the audience his insights on attacks targeting HPC infrastructures as well as to receive the support and enlightenments from the Ministry of the Economy, through the voice of Carole Brückler, Director for Industry, New Technologies and Research.
Key takeaways
If there is one takeaway from these two days, it is that while we may each perform well in our own corner, our greatest impact comes from working effectively as a system.
Humanity is at heart of everything we do. And the purpose of our work is to safeguard our fundamental rights.
Luxembourg plays a central role in several key areas. From the launch of the very first cybersecurity data space in Europe, to organising meaningful international rendez-vous just like this one.
Europe, Quebec, South Korea, Japan were gathered on the central stage to discuss interoperability. How do we ensure our innovations benefits society as a whole?
The European project is often belittled as “regulating where others innovate”. But let's look on the bright side. Regulation for interoperability is a very important measure to push back against vendor lock-in and monopolies. We have a vibrant open source community in Luxembourg, on which we should leverage.
And that has been further emphasised by the recent release of the European Commission.
Indeed, while the Summit was in full swing, the European Commission unveiled a European Technological Sovereignty Package aimed at strengthening the EU’s capabilities in semiconductors, AI, cloud computing, and open source technologies.
Europe’s Open Source Strategy aims to build on the continent’s community of more than 3 million open source contributors by expanding sovereign, European-made digital solutions in key areas such as cloud computing, AI, cybersecurity, internet technologies, and semiconductors. It also seeks to strengthen the open source ecosystem through investment in skills, startups, maintenance and security, while promoting wider adoption of open source solutions in public administrations through procurement guidance, standards, and interoperability initiatives.
As we are seeking more trust in our EU-made solutions, the open source approach can only help build it as it is based on reputation first.
All of this lead us to the Cyber Commons initiative, which are currently being structured by the Luxembourg Cybersecurity Factory. Join us on the 7th of October 2026 at the Open Source Conference to continue the discussion.
Over the past two days, it has become clear that our approach to cyber governance must evolve to account for the stochastic nature of AI technologies, which differ fundamentally from traditional systems, in order to ensure cyber resilience.
The threats and risks related to post-quantum cryptography are real, and further awareness needs to be raised. It is also important to provide the ecosystem with a testing sandbox to support preparedness and validation.
One final word?
Collaboration is key. There is no competition without collaboration.
***A big thank you to the GRC Summit Advisory Board, ******speakers as well as to all participants ***for their active and precious contributions which enabled the success of this second edition.
Recommendation Papers will follow to pursue the collaborative work initiated throughout the 4 forum sessions. Keep posted!