Anticipate, Protect, Respond: at Nexus 2026 (10–11 June in Luxembourg), cegecom announces a new strategic partnership with F3C Systems, completing a cybersecurity ecosystem covering the entire corporate defence cycle. Alongside Luxcontrol (governance, risk and compliance) and cegecom (secure and resilient connectivity), F3C Systems brings incident detection and response through a SOC operated 24/7 in Luxembourg. Three Luxembourg companies, three complementary areas of expertise, one single promise: to offer the country’s SMEs comprehensive, sovereign and accessible cybersecurity — a genuine one-stop-shop, "Made in Luxembourg", from strategy to operational response.

Cybersecurity can no longer be bought one piece at a time?

Today, most companies build their cybersecurity in fragments: one supplier for connectivity, another for the firewall, a third for compliance, a fourth for monitoring, a fifth for awareness training. Yet attackers do not attack in fragments. They exploit human vulnerabilities, technical gaps, blind spots between service providers, and slow detection.

In a context shaped by the entry into force of NIS2, the gradual adoption of DORA, and the professionalisation of cyber threats, digital resilience can no longer rest on a stack of isolated tools. It requires a coherent value chain, where each link communicates with the others.

This conviction has guided cegecom’s strategy for several years, and today takes on a new dimension with the integration of F3C Systems into its partner ecosystem.

An ecosystem built on three pillars: Anticipate, Protect, Respond

With the addition of F3C Systems, cegecom’s cybersecurity ecosystem now covers the entire defence cycle:

•  Anticipate – with Luxcontrol, cegecom’s partner since 2025, bringing expertise in governance, risk management, regulatory compliance (NIS2, ISO 27001, CRA), maturity audits, awareness training, and CISO as a Service.

•  Protect – with cegecom, which secures the digital backbone of organisations through its resilient connectivity, DDoS protection, managed firewall services, and trusted telecoms infrastructure operated from Luxembourg.

•  Respond – with F3C Systems, whose Security Operations Center (SOC) operated in Luxembourg provides 24/7 monitoring, real-time detection, remediation, and incident response, based on the European Sekoia technology.

Each partner remains an expert in its own field. None claims to do everything. That is the condition for genuinely effective cybersecurity, the opposite of a "generalist" supplier logic that dilutes added value. And because the cybersecurity market is dynamic, this ecosystem is designed to grow: other areas of expertise may join it in the future, in the service of ever more comprehensive protection.

"Our conviction is that cybersecurity must be approached as a complete value chain, not as a collection of stacked products. By bringing together Luxcontrol, cegecom and F3C Systems within a single ecosystem, we offer our clients a genuine one-stop-shop for cybersecurity, with real experts in each domain. And we do it 100% from Luxembourg, with European partners. It is a choice of coherence, sovereignty and proximity", explains Serge Eiffes, Managing Director, cegecom and artelis 

F3C Systems: a sovereign SOC finally accessible to SMEs

A 100% independent Luxembourg player, F3C Systems is structured around three complementary pillars: Infrastructure, SOC and Audit. Its security operations centre is operated from Luxembourg by a local team of analysts and is built on Sekoia technology —  a European-origin XDR/SOC solution enriched by internal developments.

Beyond sovereignty, F3C brings a major innovation to the ecosystem: the democratisation of the SOC. Where most supervision centres remain reserved for large enterprises, F3C has designed an offering accessible to organisations of all sizes.

Its transparent and predictable commercial model is the main lever: billing is based on the number of supervised assets (workstations and servers), not on the volume of ingested logs or events per second — units that are difficult to interpret for a business leader. The result: a Luxembourg SME can now access the same level of monitoring as a major bank, with full visibility over its current and future costs.

"We are very pleased to join the ecosystem established by cegecom. The complementarity is immediate: cegecom protects the infrastructure, F3C monitors what is happening in real time and responds to it. Our shared ambition is to make high-level cybersecurity genuinely accessible to Luxembourg businesses, without them having to become cybersecurity experts themselves. The ecosystem speaks their language — that too is what sovereignty means", comments Frédéric Lens, F3C Systems. 

Luxcontrol: governance takes on its full meaning in a complete cycle

As the ecosystem’s first cybersecurity partner, Luxcontrol forms its strategic foundation. With over 40 years of experience as an accredited inspection and certification body, Luxcontrol helps organisations lay the foundations of their resilience: governance, risk management, regulatory compliance (NIS2, ISO 27001, CRA), awareness training and CISO as a Service support.

The integration of this expertise into a complete cycle — where protection (cegecom) and detection-response (F3C Systems) take over — changes the picture. Governance and compliance no longer remain theoretical: they translate directly into operational, verifiable and measurable actions in the field. The recommendations arising from audits find their concrete continuation in the protected infrastructure and continuous monitoring.

"Cybersecurity starts with governance, culture and risk management, but only reaches its full value when it connects to the operational level. By being part of this end-to-end ecosystem, our advisory and audit work leads to genuine operational impact: the strategy we help define is then truly protected, monitored and defended. It is this continuum that is the strength of the Luxembourg model", states Olivier Antoine, Luxcontrol.

A joint presence at Nexus 2026

The partners will bring this ecosystem to life at Nexus 2026, Luxembourg’s innovation and technology event, on 10 and 11 June.

On the Visionary Stage (10th June, 17:00-17:30), cegecom, Luxcontrol and F3C Systems will hold a joint keynote entitled  "The Cybersecurity Value Chain: Securing the Digital Economy End-to-End". The presentation will address the need for Luxembourg businesses and the Luxembourg economy to think about cybersecurity as an integrated value chain, in which governance, infrastructure and operations mutually reinforce one another.

Visitors are also invited to join cegecom’s shared stand with its partners (Intelligence Forum, No. 84), where they will be able to speak directly with experts from all three companies and discover, through concrete case studies, how the ecosystem addresses the operational and regulatory challenges facing the country’s SMEs.

A transformation strategy taking shape

This announcement is part of the trajectory set in motion since Serge Eiffes took over as Managing Director of cegecom and artelis. After 25 years of expertise in connectivity and secure networks, cegecom is continuing its transformation towards the status of a value-added ICT services provider, drawing on structural partnerships with recognised local players.

Following the announcement of partnerships with Luxcontrol (cybersecurity, governance, compliance) and Dotika (strategic consulting, training and integration of artificial intelligence solutions) at Nexus 2025, the integration of F3C Systems further strengthens the cybersecurity component of this ecosystem. Further announcements will follow in the coming months, in the same vein: enriching cegecom’s offering through high-value-added partnerships anchored in Luxembourg and focused on the needs of local businesses.