CISO Poland (formally the CISO #Poland Foundation) is a non-commercial foundation and community of information security leaders, notarized on March 21, 2023. It currently brings together over 150 experts – CISOs, heads of SOC/CERT/CSIRT and representatives of public administration and academia – around the goal of exchanging knowledge, experience and good practices in the area of cybersecurity.
SECAWA is one of the donors of the CISO #Poland Foundation – in this way we support the increase in cybersecurity awareness in the country.
History and origins of the CISO Poland foundation
The community from which the foundation arose was initiated by Andrzej Bartosiewicz in November 2022 as an informal place for exchanging information between security chiefs. Formalization took place on March 21, 2023, when nearly twenty founders signed notarial documents establishing the foundation.
The immediate impetus for transforming a loose community into a formal organization was two factors:
- growing activity of hacker groups sponsored by hostile countries,
- the upcoming implementation of EU regulations UKSC/NIS2 and DORA.
The founders recognized that in such conditions there is a need for a platform for direct CISO cooperation not only among themselves, but also with state authorities and European partners.
Who can join CISO Poland
Membership is open to natural persons meeting at least one of the following criteria: performing the function of CISO or an equivalent management position in information security, managing a SOC, CERT or CSIRT unit, representing entities standardizing the industry, state and local government authorities, academic units, or having recognized, long-term expertise in cybersecurity.
One limitation concerns representation – a maximum of three participants from one organization can belong to the community, which is intended to prevent single companies from dominating the discussion.
Confidentiality Policy and Code of Conduct
The foundation’s activities are regulated by a code of conduct that applies to members, associated persons and representatives of partner organizations – both during and outside meetings. Meetings of groups related to CISO Poland are held according to the Chatham House principles: participants can freely use the information they hear, but without revealing the identity of the speaker.
When exchanging more sensitive data, Traffic Light Protocol (TLP) is used, and in justified cases, the parties may additionally sign an NDAwith the foundation as the depositary. The Code explicitly prohibits foundations from engaging in political activities. Current communication between members takes place on the Signal platform, in the main group and thematic subgroups managed by the Management Board.
General Assembly – annual CISO Poland event
The most important point in the foundation’s calendar is the annual General Assembly, considered the leading platform for exchanging experiences between information security specialists in Poland. The 2025 edition took place at the NASK headquarters and gathered nearly 200 industry leaders from all over the country. The participants included Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski and NASK Director Radosław Nielek, who emphasized the need to treat Poland’s digital resilience as a common goal, regardless of institutional or political divisions.
The Secawa team, of course, could also be present at this event – and not only as an observer. Secawa CEO, Piotr Kaźmierczak, appeared on stage with a lecture on attacks in the era of artificial intelligence. It was during this speech that we announced a free AI vs Cybersecurity webinar series, in which we analyzed AI-supported attacks, the phenomenon Shadow AI and prompt injction and ways to use artificial intelligence to support the CISO’s work. Recordings and materials from the entire series can be collected free of charge here.
Who manages the CISO Poland foundation
The Management Board is headed by Dr. Eng. Andrzej Bartosiewicz, CISO at Zakłady Automatyki KOMBUD S.A. and founder of the foundation. The Management Board also includes Marcin Kabaciński, CISO at PayPo, and Jarosław Sordyl, an expert in the area of industrial cybersecurity and incident management.
CISO Poland cooperation with national and European institutions
The Foundation maintains constant cooperation with the Ministry of Digitization and the NASK Institute, which can be seen, for example, in the organization of subsequent editions of the General Assembly at these institutions. At the European level, CISO Poland cooperates with ECSO (European Cyber Security Organization), connecting the national CISO community with a wider network of security leaders operating in the European Union.
CISO Poland and CSO Council – what are the differences
Both entities share a similar goal – building a trusted knowledge exchange platform for security leaders – but their legal form and scope differ. CSO Council is an initiative of ISSA Polska and Evention, addressed exclusively to people performing CSO or CISO functions in large organizations, operating through cyclical meetings 8-10 times a year.
CISO Poland is a formal foundation with broader membership criteria – it also includes the heads of SOC, CERT and CSIRT, regulators and scientists – and has a European dimension thanks to cooperation with ECSO, which the CSO Council does not offer. They also differ in their approach to confidentiality: CISO Poland applies, in addition to the Chatham House principle, the Traffic Light Protocol and formal NDA, which reflects a broader scope of exchanged information, including data on specific incidents.
Frequently asked questions about CISO Poland
What is CISO Poland?
CISO Poland is a non-commercial foundation and community of information security leaders in Poland, established in March 2023.
Who can join CISO Poland?
People holding the position of CISO or an equivalent position, heads of SOC/CERT/CSIRT, representatives of state and local authorities, academic units and recognized cybersecurity experts.
Who manages the CISO Poland foundation?
The Management Board is composed of Dr. Eng. Andrzej Bartosiewicz (President), Marcin Kabaciński and Jarosław Sordyl.
What is General Assembly CISO Poland?
This is the foundation’s annual flagship event – the 2025 edition took place at the NASK headquarters and gathered nearly 200 industry leaders.
How does CISO Poland differ from CSO Council?
CISO Poland is a formal foundation with broader criteria for European membership and cooperation (ECSO), and CSO Council is an initiative of ISSA Polska and Evention addressed exclusively to CSOs/CISOs of large companies in Poland.
