September 2026
Brussels, Belgium – As cyber threats to critical energy infrastructure increasingly transcend national borders, international cooperation and trusted information sharing are becoming fundamental. Against this backdrop, the European Energy Information Sharing and Analysis Centre (EE-ISAC) and the Canadian Gas Association (CGA), on behalf of the Energy Security Technical Advisory Committee (E-STAC), formalised a Memorandum of Understanding (MoU) to support the cyber resilience of energy critical infrastructure across Canada and Europe.
The new MoU sets the stage for closer cooperation between the two organisations, enabling them to exchange expertise, share relevant cybersecurity information and pursue joint initiatives. The partnership will initially address operational technology (OT) and industrial control systems (ICS) cybersecurity, threat intelligence sharing, situational awareness, cybersecurity exercises and workforce development.
The E-STAC is a sector-led forum convened by the CGA to support trusted collaboration on energy security, particularly cybersecurity, across industry, government and selected international partners. Its membership spans oil, gas, electricity and nuclear and touches the full value chain from production to distribution. The E-STAC also operates the Blue Flame Program, a telemetry collection service bringing together live telemetry to establish visibility across the Canadian energy sector in terms of threat activity.
Massimo Rocca, President of EE-ISAC, highlighted the importance of international cooperation in strengthening the resilience of the energy sector:
“Cyber threats do not respect borders. Building trusted international partnerships is essential to strengthening the resilience of the energy sector. This agreement with E-STAC represents an important step toward deeper collaboration between European and Canadian energy stakeholders, enabling us to learn from one another and better address the challenges of an evolving threat landscape.”
Through this MoU, the EE-ISAC and the CGA on behalf of E-STAC aim to strengthen structured and ongoing information sharing between their communities. The cooperation will support the exchange of threat insights, lessons learned and good practices related to OT environments, while creating opportunities for collaboration among trusted practitioners.
A key element of the partnership will be collaboration on the Dúnedain Network, a trusted international network of operational technology and cybersecurity practitioners supporting critical infrastructure resilience. The parties also intend to explore MISP federation and threat intelligence sharing, as well as joint analytical activities to strengthen situational awareness of emerging risks affecting European and Canadian energy systems.
The collaboration will also include opportunities for cybersecurity exercises, training and workforce development, alongside dialogue on cybersecurity policy, regulatory developments and public-private collaboration in the energy sector.
David McConkey, Senior Director of Operations & Corporate Services at the CGA, stressed the importance of the partnership:
“The Energy Security Technical Advisory Committee (E-STAC), representing organizations that account for nearly 10% of Canada’s GDP and 70% of the country’s energy sector, is delighted to formalize this partnership with the European Energy ISAC. Trusted international partnerships such as this expand our collective visibility of the threat landscape and create opportunities for meaningful collaboration, information sharing, and capability development. Together, we are strengthening the resilience of the energy sector and the critical services it provides.”
It is envisaged that a phased approach will be adopted, beginning with a high-level exchange of experiences and best practices. Information shared under the cooperation will be handled in accordance with the Traffic Light Protocol (TLP) framework and the applicable requirements of each organisation.
The MoU remain in effect until December 31, 2028.
About EE-ISAC
European Energy Information Sharing & Analysis Centre (EE-ISAC) is an industry-driven, information sharing network of trust. Private utilities, solution providers and (semi)public institutions such as academia, governmental and non-profit organizations share valuable information on cyber security and cyber resilience in the European Energy industry. EE-ISAC aims to improve the resilience and security of the European energy infrastructure, by sharing trust-based information and enabling a joint effort for the analysis of threats, vulnerabilities, incidents, solutions and opportunities. EE-ISAC offers a community of communities to facilitate this proactive information sharing and analysis, allowing its members to take their own effective measures.
For more information, please visit www.ee-isac.eu
For media inquiries, please contact communications@ee-isac.eu
About E-STAC
The E-STAC is an industry-led forum established by the CGA to strengthen information sharing and strategic coordination on energy security. Bringing together industry stakeholders, government representatives and selected international partners, E-STAC focuses particularly on cybersecurity, fostering the exchange of trusted information, strengthening technical and operational capabilities, supporting workforce development and contributing to policy development. Its work also promotes cooperation across critical infrastructure sectors to enhance the resilience and security of the energy sector.
For more information, please visit www.cga.ca.
