ISAC FOR IDENTITY AND QTSP
Our Work
From operational intelligence to reproducible attacks and consistent evaluation.
Four permanent technical groups
The four Technical Groups cover threat analysis, cooperation between SOCs, attack methods and evaluation. The Steering Committee sets their priorities and validates critical deliverables.
Three cross-cutting activities
All four Technical Groups contribute to the following cross-cutting activities.
Regulatory, Standards & Institutional Liaison
Connecting technical evidence with the European regulatory, certification and standardisation ecosystem.
Members review regulatory and standards developments alongside operational findings. They use the results to propose changes to requirements, certification schemes and specifications.
- Monitor regulatory developments and new or revised standards, including immature requirements and exploitable gaps.
- Review certification schemes and evaluation requirements; identify gaps, ambiguities and unsafe assumptions.
- Develop Technical Specifications, common positions and evidence-based recommendations, with contributions to relevant authorities and ESOs & SDOs.
- Share analyses and explanatory guidance so members can interpret new requirements consistently.
Planned outputs
Regulatory and Technical Specification Analyses · Certification Scheme Reviews · Gap Analyses · Technical Recommendations
Relevant groups and task forces develop the evidence. Critical documents follow Steering Committee validation before adoption or external use.
Exercises, Shared Capabilities & Dissemination
Turning shared knowledge into practical testing, reusable capabilities and collective learning.
Joint activities connect operational intelligence, reproducible Attack Methods and consistent evaluation. They allow members to compare approaches, validate findings and strengthen practical capabilities across identity and (Qualified) trust services.
- Run joint testing campaigns, red-team exercises and attack simulations based on relevant real-world scenarios.
- Operate shared sandboxes for functional, security, interoperability and conformity testing for identity.
- Organise inter-laboratory comparisons and demonstrations to test reproducibility and validate new Attack Methods.
- Share resources and lessons learned through technical workshops, expert sessions, training and publications.
Planned outputs
Testing Campaigns · Red-Team Exercises · Sandboxes · Inter-Laboratory Comparisons · Shared Capabilities · Knowledge Dissemination
Findings are shared within, and where appropriate beyond, the community under the applicable confidentiality and dissemination rules.
AI Risk Analysis
Assessing AI-driven risks across the full identity and trust ecosystem.
AI risk analysis spans identity issuance, remote verification, (Qualified) trust services and relying-party acceptance. Coordinated by the Steering Committee with contributions from all four technical groups, it feeds operational intelligence, attack development and assurance methodologies.
- Analyse AI-assisted identity fraud, deepfakes and synthetic identities.
- Review model, data and integration risks affecting enrolment and identity verification.
- Develop attack scenarios and red-team exercises for injection attacks and automated fraud.
- Support reproducible AI testing across laboratories and assessment bodies, with mitigation guidance for identity, (Q)TSP and relying-party use cases.
Planned outputs
AI Risk Assessments · Test Protocols · Attack Scenarios · Mitigation Guidance
Members update test methods as AI capabilities and observed attack techniques change.