Hackathon-as-a-Service

Three things, written down

Not us running an event for you: us helping you build the capability to run it yourself, and keep running it. The session leaves three things written down.

• Roles. Which functions must be represented for an exercise to mean anything, and who in your organisation fills each one. Most plans fail here, by rehearsing detection with the people who detect and leaving out the people who decide.
• Responsibilities. Who decides, who executes, who reports. The authority to contain, the authority to recover and the obligation to notify, assigned to named roles rather than to a team.
• Tooling. The two tools H3 deploys for you, chosen so the capability stays yours: MISP, which is open source, and Maltego Community Edition, which is proprietary though it carries no charge. H3 writes a deployment guide for each.

H3, the harness that deploys them, is published as three guides you can follow with or without us: Guide 1: Setup stands it up on a machine you control, Guide 2: Platform validation proves it sound, and Guide 3: Operations runs your first exercise on it.

Art.
21(2)(f)

The obligation behind it

NIS2 asks for more than written risk-management measures. It requires assessing whether they actually work, and places incident handling and crisis management among the measures in scope. An exercise is the practical way to carry out that assessment, with your own staff, in the roles they hold at work. The provisions are set out in full on the main page.

We deliver this under our mission as a Luxembourg non-profit and an accredited vocational training organiser, to support NIS2 readiness across EU critical infrastructure. It is offered to organisations in the EU that need support with NIS2, to the global Space ISAC community, and to any academic, commercial or government organisation in a critical infrastructure sector.

Requesting a session

Delivery

A working session with your own staff, in the roles they hold at work

Prerequisites

None

Capacity

12 to 24 support missions a year, taken on a rolling basis

You leave with

A roles and responsibilities matrix, and the recommended tooling list

Afterwards you can run it again without us, which is the point. Tell us your organisation, roughly how many people would take part, and when suits: request a session. We reply to arrange the scoping call. Nothing is charged and no payment details are collected. If you would rather do it alone, the whole method is published on the portal and asks for nothing in return.

Neither an exercise nor a Hackathon-as-a-Service mission carries any requirement to donate, expected or implied, and no request is weighted by whether you do. We are a non-profit funded by our training work and by donations, which are welcome and are never a condition of anything here.

Provider

B2710

303 Overwatch A.S.B.L is a Luxembourg non-profit association (R.C.S. Luxembourg F13274) and runs the Space Cybersecurity Operations and Resilience Platform Professional Center of Excellence (CoE). Accredited by the Luxembourg Ministry of National Education. The accreditation, as an organiser of continuing vocational training, is the ministerial act of 12 June 2026, Mémorial B2710. Questions about a session: workforce.development@303overwatch.org.