Interview With Marietta Gieroń – Chairwoman of the Kosciuszko Institute by Shauli Zacks

Shauli Zacks

Published on: May 6, 2025
Content Editor

As cyber threats grow more complex and geopolitical tensions escalate, the need for regional cybersecurity leadership has never been greater. Marietta Gieroń, Chairwoman of the Kosciuszko Institute and head of the CYBERSEC EXPO & FORUM Programme Committee, is at the forefront of this mission. In this SafetyDetectives interview, she shares how the Institute is shaping cybersecurity policy across Central and Eastern Europe, fostering cross-sector collaboration, and preparing for the next wave of technological disruption — from AI to quantum computing.

Marietta Gieroń also serves as the Chairwoman of the Member Board of the Kosciuszko Institute and a holder of commercial power of attorney at the Polish Cybersecurity Cluster. An experienced leader with a strong focus on strengthening international cross-sector cooperation. As the organizer of the European Cybersecurity Forum, she strives to enhance public-private collaboration, while in her role at the Kosciuszko Institute she is committed to promoting gender equality in the IT sector, digital education for youth, and initiatives dedicated to the Central and Eastern Europe region.

Can you start by introducing you and talk about the mission of the Kosciuszko Institute in the cybersecurity landscape?

My name is Marietta Gieroń, and I’m Chairwoman of the Kosciuszko Institute and the Chair of the Programme Committe of the CYBERSEC EXPO & FORUM. My background lies at the intersection of international security, the empowerment of women in the cybersecurity sector, and strategic policy development — all of which are central to the Institute’s mission.

The Kosciuszko Institute is one of Poland’s leading non-governmental think tanks. Our mission is to strengthen strategic resilience and cybersecurity capabilities across Poland, the EU, and NATO. We operate at the crossroads of policy, technology, and societal resilience, engaging both public and private stakeholders. Our aim is to deliver actionable policy recommendations and foster cross-sector collaboration to safeguard democratic values in the digital age.

The Kosciuszko Institute has been instrumental in launching CYBERSEC. What was the motivation behind creating this platform, and how has it evolved over the years?

CYBERSEC was founded in 2015 with a clear mission: to create a platform for strategic dialogue on cybersecurity policy in Central and Eastern Europe. At the time, cybersecurity discussions were dominated by Western institutions, and there was a pressing need for a forum that reflected the unique challenges and perspectives of our region.

Over the years, CYBERSEC has grown into one of Europe’s leading cybersecurity conferences. We have welcomed high-level representatives from governments, NATO, the European Commission, the private sector, and academia. The platform has expanded well beyond the flagship annual conference in Kraków, with additional editions held in Brussels, Washington D.C., and virtually.

Today, CYBERSEC is not only a forum for strategic discussion — it is a catalyst for tangible policy outcomes and public-private cooperation. Moreover, it has become a dynamic expo space where companies can showcase their solutions and products, strengthen their visibility, and build lasting business relationships.

Europe is facing an increasingly complex threat landscape. How does the Institute contribute to shaping cybersecurity policy within the EU?

At the Kosciuszko Institute, we approach cybersecurity not merely as a technical challenge, but as a cornerstone of democratic resilience, economic stability, and geopolitical sovereignty. Our mission is to help ensure that cybersecurity policy within the European Union is strategic, inclusive, and forward-looking — particularly in light of rapidly evolving threats such as hybrid warfare, attacks on critical infrastructure, and the rise of digital authoritarianism.

We contribute to shaping EU cybersecurity policy through several concrete channels:

• Research and Strategic Analysis:
  We regularly produce expert reports, white papers, and policy briefs that offer evidence-based recommendations on key issues such as NIS2 implementation, cyber diplomacy, and the security of digital public services. Our publications are widely cited and serve as reference points for both national and EU-level policymakers.
• Multistakeholder Engagement:
  One of our core strengths is the ability to convene diverse stakeholders — including policymakers, cybersecurity professionals, civil society, and academia. Through CYBERSEC and related initiatives, we create trusted spaces for cross-sector dialogue, knowledge exchange, and consensus-building.
• Amplifying Regional Voices:
  As a think tank based in Central and Eastern Europe, we ensure that the region’s perspectives — including its distinct geopolitical sensitivities and capacity-building priorities — are reflected in broader EU cybersecurity strategies. This prevents a one-size-fits-all approach and promotes more balanced, inclusive policymaking.

What are some of the biggest cybersecurity challenges you believe Central and Eastern Europe will face in the next 5 years?

Central and Eastern Europe (CEE) stands at a strategic geopolitical crossroads — and as such, it faces a set of cybersecurity challenges that are both unique and increasingly urgent. Based on our analyses and ongoing consultations with regional experts and partners, I believe the most pressing challenges over the next five years include:

• Escalation of Hybrid Threats:
  The region remains particularly vulnerable to hybrid tactics such as cyber-enabled disinformation, electoral interference, and sabotage of critical infrastructure. Both state and non-state actors — especially those aligned with authoritarian regimes — are expected to intensify efforts to undermine trust in democratic institutions and exploit social and political divisions.
• Fragmented Cybersecurity Capacity:
  While some CEE countries have made notable strides in enhancing their cybersecurity posture, others continue to lack robust national strategies, threat intelligence capabilities, and specialized personnel. Addressing this imbalance requires sustained investment in capacity-building, education, and cross-border cooperation mechanisms.
• Strategic Dependence on Foreign Technology Providers:
  The region remains exposed to dependencies in areas such as telecommunications, cloud infrastructure, and emerging technologies like AI. In the absence of coherent policies on trusted vendors and supply chain security, CEE countries risk exposure to surveillance, cyber sabotage, or economic coercion.
• Cyber Talent Shortage:
  The gap in skilled cybersecurity professionals is particularly acute in the CEE region, affecting both the public and private sectors. Bridging this gap will require long-term investment in talent development — including academic-industry partnerships, targeted scholarships, and comprehensive upskilling programs.
• Adapting to Emerging Technologies and Regulatory Demands:
  As the EU introduces far-reaching digital regulations, CEE countries must modernize their legal frameworks and operational capacities to ensure compliance and strategic alignment. This includes aligning with key EU priorities such as digital sovereignty, cybersecurity certification schemes, and resilience of digital infrastructure.

The good news is that the region is increasingly aware of these vulnerabilities. Both intra-regional cooperation and partnerships with European and transatlantic allies are strengthening — a critical step toward building long-term resilience.

Can you share an example of a research project or policy paper that had a tangible impact on government or industry cybersecurity strategy?

Last year, following the signing of a Letter of Intent with the Polish Ministry of Digital Affairs and the European Cyber Security Organisation (ECSO), the Kosciuszko Institute coordinated a comprehensive research and consultation initiative that had a direct impact on shaping cybersecurity strategy ahead of Poland’s upcoming presidency of the Council of the European Union.

We convened a series of four high-level expert meetings in Warsaw, Brussels, and Kraków, bringing together key stakeholders from both the public and private sectors. Each meeting was dedicated to a critical area of cybersecurity policy:

1. Skills and Cyber Hygiene – advancing digital competences and awareness across society,
2. Legislative Implementation – addressing practical challenges related to new EU cybersecurity laws such as DORA and NIS2,
3. Dual-Use Technologies – enhancing cross-sector collaboration in the field of cybersecurity innovation,
4. Cybersecurity Investment – improving access to financing for cybersecurity sector growth and startup development.

To maximize impact, we established dedicated working groups for each thematic area. The outputs of these discussions were compiled into a series of policy briefs, which were formally submitted to the Ministry of Digital Affairs. These briefs were later published on the Ministry’s website and have served as strategic reference points in both national and EU-level cybersecurity planning — particularly in the context of Poland’s forthcoming EU Council presidency.

This initiative exemplifies how structured, multi-stakeholder dialogue can generate actionable policy recommendations and contribute to a more cohesive and forward-looking cybersecurity strategy at both national and European levels.

With emerging technologies like AI, quantum computing, and digital sovereignty shaping the cybersecurity dialogue, how is the Kosciuszko Institute preparing for what’s next?

At the Kosciuszko Institute, we recognize that emerging technologies such as artificial intelligence, quantum computing, and digital sovereignty are no longer distant prospects — they are already reshaping the cybersecurity landscape in profound ways. In response, we are aligning our strategic priorities and thought leadership to anticipate, understand, and shape these developments in a way that promotes resilience, security, and democratic values.

A cornerstone of this effort is our flagship event — CYBERSEC EXPO & FORUM 2025 — which will place a particular emphasis on these transformative technological challenges. The agenda has been carefully curated to promote future-oriented dialogue around the most pressing developments at the intersection of innovation and security. Sessions such as “Fostering Trust in AI – The EU’s Role in Balancing Innovation and Security”, “Dual-Use Technology as a Strategic Asset for European Autonomy”, and “The Role of Quantum Computing in Strengthening Defensive Capabilities” will bring together leading experts, policymakers, and innovators to discuss how Europe can navigate these shifts securely and responsibly.

Beyond the conference, the Institute is actively engaged in forward-looking policy research and multistakeholder initiatives aimed at integrating emerging technologies into a cohesive cybersecurity framework. Our work contributes to shaping a strategic approach that reinforces Europe’s digital sovereignty while enhancing its operational and institutional resilience.

By creating platforms for cross-sector collaboration and advancing policy debates, we aim to ensure that Europe’s cybersecurity strategy evolves in parallel with technological innovation — without compromising on trust, accountability, or fundamental rights.