ISAC FOR IDENTITY AND QTSP

Membership

Contribute to a stronger identity and trust ecosystem in Europe.

Why participate?

Bring operational experience into a shared technical discussion. Help the community understand emerging threats, reproduce attack methods and improve the consistency of security evaluation.

Members compare findings and develop methods that other organisations can use. Their work contributes to countermeasures, certification schemes and standards.

Organisations that can participate

Membership covers the organisations listed below, from public document issuers to relying parties and assessment bodies.

Identity Document Issuers

Document security, physical credentials, issuance and enrolment fraud.

Digital Identity Issuers

Digital enrolment, credential lifecycle, authentication and identity compromise.

Remote Identity Providers

Remote identity proofing and protection against presentation and injection attacks.

(Q)TSPs

Operational trust service security, verification, vulnerabilities and incidents.

Technology Providers

Identity and trust technologies, technical expertise and practical countermeasures.

Testing Laboratories

Reproducible attacks, test conditions, technical evidence and interlaboratory comparisons.

Conformity Assessment Bodies

Consistent security evaluation, interpretation and conformity assessment.

NCCAs

National Cybersecurity Certification Authorities connecting findings to certification frameworks.

ESOs & SDOs

European and international standards organisations connecting evidence with specifications.

Relying Parties

PID and electronic attestation verification, acceptance rules, fraud signals and relying-party risks.

What could your organisation contribute?

Operational insight: relevant threat, incident, vulnerability and fraud information under agreed sharing rules.

Technical expertise: attack reproduction, testing, evaluation, countermeasure analysis and peer review.

Collective work: participation in technical groups, joint exercises, workshops and the development of common deliverables.

Admission, fees and participation obligations are governed by the Statutes and membership rules. An expression of interest is not a membership application or commitment.

Take part in the ISAC.

Contribute to threat analysis, technical testing or evaluation methods.