Information Security

Contacts

Report security incident Report security incident

Report a phishing or request analysis forwarding Report a phishing or request analysis forwarding

Contact the Information Security Officer Contact the Information Security Officer

Information Security Officer

The Information Security Office (ISO) ensures that EUI maintains an appropriate level of risk with respect to both internal and external security threats while fulfilling its compliance obligations. This is achieved through a balanced approach that aligns robust security practices with the Institute’s strategic objectives and day-to-day operations. In its role as Local Cybersecurity Officer, the ISO acts as the single point of contact for all cybersecurity matters within EUI. It promotes alignment with the principles and standards set out in Regulation (EU, Euratom) 2023/2841, taking into account the Institute’s specific legal framework, and reports directly to senior management.

President’s Decision 18/2026 establishes the voluntary adoption of Regulation (EU, Euratom) 2023/2841 at EUI and designates the ISO as the single point of contact for cybersecurity matters, responsible for promoting alignment with the Regulation and reporting to senior management.

Main responsibilities

The Information Security Officer (ISO) works closely with the EUI community to protect the confidentiality, integrity, and availability of the Institute’s information and IT resources. The ISO oversees cybersecurity risk management and governance, ensures the implementation of appropriate security measures, and coordinates incident response in collaboration with interinstitutional partners such as CERT‑EU, while aligning closely with data protection requirements.

Report security incidents

Please report any security event or incident to cybersecurity@eui.eu; Request the analysis of an email message by forwarding it to phishing@eui.eu

Contact the Information Security Officer by sending a message to iso@eui.eu.

Information Security Risk Assessment

We support new and ongoing initiatives by providing advice and guidance to ensure that information security risks are effectively identified, assessed, and managed, in line with applicable compliance requirements. Contact ISO to receive assistance and guidance.

Identity and Access Management

Identity and Access Management (IAM) is a set of technical services and policy controls that enable members of the EUI community to securely access IT services appropriate to their role within the Institute.This includes the management of user credentials (such as usernames and passwords), EUI email accounts, and licensing that supports access to digital services. It also encompasses the rules that govern access to the Institute’s systems and data. Protecting EUI credentials is essential to ensuring secure authentication and is supported by strong password policies and access controls. 

Security advisory

We provide security advisory services to research projects, faculty, and administrative units to strengthen the protection of data and data processing activities. This includes tailored guidance to support compliance, mitigate risks, and enhance the resilience of IT systems and assets.

Vulnerability Management

We provide vulnerability management services to proactively identify, assess, and address security weaknesses across IT systems and applications. This includes guidance on remediation and mitigation measures to reduce risk exposure and strengthen the overall resilience of the Institute’s digital environment.