Accessibility

From Defense to Resilience: How Ukraine and Its Partners Are Setting New Standards in Cyber Cooperation via Tallinn Mechanism

EU CyberNet and Tallinn Mechanism teams sat down with Olesya Danylchenko, the Head of the Tallinn Mechanism Project Office (TMPO) to discuss how the TMPO, Ukraine and its international partners help to improve global cyber resilience.

Olesya, before joining the Tallinn Mechanism (TM) and TMPO, you had experience at the crossroads of the financial and cybersecurity sectors. Could you share a bit about your professional background and what led you into international cybersecurity cooperation?

My background spans more than 25 years of experience at the intersection of technology, finance and security. Before leading the Tallinn Mechanism Project Office (TMPO), I spent 15 years as Head of the Security Forum and Deputy Director of the Ukrainian Interbank Payment Systems Members Association “EMA”. In this role, I coordinated public–private partnerships and international cooperation in combating cybercrime — primarily focused on protecting financial institutions and their clients through information sharing, community building and trust development.

Since 2012, I have represented Ukraine in the European Association for Secure Transactions and in 2016 I was selected through a competitive process to become a member of Europol’s Advisory Group on Financial Services within the European Cybercrime Centre. Operating at the crossroads of geopolitics and cybersecurity, I shared Ukraine’s experience in countering payment fraud and financial cybercrime, while learning from the best European practices and facilitating their adaptation in Ukraine.

When the full-scale invasion began, I immediately felt both the tremendous international support for Ukraine and the lack of coordination and visibility in transforming that support into concrete cybersecurity projects. So when I first heard about the Tallinn Mechanism, my reaction was immediate — this is exactly what Ukraine needs. My strong background in public–private cooperation and international coordination naturally aligned with the Mechanism’s mission to strengthen Ukraine’s cyber resilience through collective action and partnership.

At the same time, since 2022, together with Ukrainian Interbank Payment Systems Members Association “EMA”, National Cybersecurity Coordination Center (NCSCC) and State Service of Special Communications and Information Protection of Ukraine (SSSCIP), I have been developing my own initiative — SOC DAY Ukraine — aimed at sharing best practices of Security Operations Centers across different sectors of the economy. We started with a webinar for 30 participants in 2022 and grew to an in-person event hosting over 400 participants in 2025. This initiative is fully complementary to the projects supported by the Tallinn Mechanism, sharing the same goals and values in advancing cyber resilience for Ukraine.

From your perspective, what are the biggest challenges Ukraine faces in cyberspace today?

Ukraine has been on the frontline of cyber warfare since 2014. The scale and intensity of Russian cyberattacks remain unprecedented — from disruptions of the energy and logistics sectors to attempts to undermine public trust in state institutions.

According to the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), 3,018 cyber incidents were detected in the first half of 2025, compared to 2,575 in the preceding six months. Russian hackers continue to exploit knowledge of Ukraine’s infrastructure gained during earlier attacks and actively use supply chain breaches as a primary infiltration vector. It’s also a growing use of automation and hybrid tactics that combine espionage with sabotage.

What makes these attacks distinctive is that the majority of them are not financially motivated. Their goal is to paralyse key sectors — finance, telecommunications and transport — to spread chaos and weaken public confidence.

Despite this, Ukraine has managed to sustain its digital state even under constant attacks and is developing counterattack practices that can benefit other countries, including those in the EU. But the challenge remains. Ukraine must continue to strengthen its cyber resilience and build mechanisms that allow it to counter threats proactively — ensuring that our defenses evolve faster than the threats themselves.

How would you explain in simple terms what the Tallinn Mechanism is and how it helps strengthen Ukraine’s cyber resilience?

The Tallinn Mechanism is an international initiative launched in 2023 to coordinate and systematise cybersecurity assistance to Ukraine.

As of October 2025, it brings together 13 countries: the United Kingdom, Denmark, Estonia, Italy, Canada, the Netherlands, Norway, Germany, Poland, the United States, Finland,  France and Sweden. The European External Action Service, NATO and the World Bank are official observers, while France and Sweden currently co-chair the initiative.

Tallinn Mechanism unites member states, international organisations and Ukrainian institutions to ensure that support goes exactly where it’s most needed — to protect cybersecurity of critical and civil infrastructure, develop cyber expertise and strengthen institutional capacity. It’s not just about responding to cyber incidents. It’s about building long-term cyber resilience.

The Ministry of Digital Transformation emphasises that in the context of the most technologically advanced war in modern history, only the coordinated efforts of international partners make it possible to respond to threats promptly and build a secure digital environment — both for Ukraine and for the entire democratic world.

TMPO was officially launched in April 2025. What are its main objectives and why is its work so important for the success of the Tallinn Mechanism?

Working in coordination with the TM Front Office in Estonia, the Tallinn Mechanism Project Office (TMPO) acts as a bridge connecting international donors, implementing partners, Ukrainian counterparts and recipients. The establishment of TMPO was initiated by the Ministry of Digital Transformation of Ukraine. We work closely with Ukrainian governmental counterparts — including the SSSCIP, the Ministry of Foreign Affairs, the Security Service of Ukraine and the National Cybersecurity Coordination Center (NCSCC).

Valeriya Ionan, Advisor to the First Deputy Prime Minister and Minister of Digital Transformation of Ukraine on Innovation, Digitalization, and Global Partnerships — and one of the initiators behind the establishment of the TMPO — highlights that this model of partnership forms the foundation of the long-term cyber resilience that Ukraine is building today.

Our key tasks include providing technical assistance and visibility for TM-funded projects, coordinating their implementation and maintaining the Catalog — a cyber assistance portal that matches Ukraine’s cybersecurity needs with international support opportunities. We also aim to engage the private sector in TM activities to bring their expertise, technologies and capabilities to Ukraine’s cyber resilience efforts.

What inspired you personally to take on the role of Head of TMPO?

I was inspired by the opportunity to contribute to something both meaningful and practical — an initiative that transforms international solidarity into measurable resilience.

This role allows me to see how cooperation and trust between partners transform into new cybersecurity capabilities. Every implemented project, every training session, every upgraded system means Ukraine becomes stronger and safer. That’s deeply motivating.

The EU CyberNet is one of the TM’s partners. What role does it play in supporting the TMPO and the broader Tallinn Mechanism, and how does this cooperation make Ukraine more resilient?

The TMPO is supported by the Estonian Centre for International Development (ESTDEV) and EU CyberNet — our good partners in building long-term institutional capacity.

As the European Union’s network for external cyber capacity building, EU CyberNet connects leading European cybersecurity experts and partners to promote the exchange of best practices in cybersecurity and countering cybercrime. In Ukraine’s case, it helps ensure that the activities of the Tallinn Mechanism and TMPO are aligned with European standards and benefit from the collective experience of EU member states.

This cooperation enhances coordination among international partners and ensures that Ukraine’s digital and cyber resilience is built on strong and long-term foundations.

How does Ukraine ensure that international support through the Tallinn Mechanism is directed exactly where it is most needed?

This is one of the Mechanism’s greatest strengths. All project proposals are first reviewed by a Technical Working Group of Ukrainian cybersecurity experts who assess their technical feasibility and relevance. Then, an Interagency Working Group, which includes representatives from the Ministry of Digital Transformation, SSSCIP, the Ministry of Foreign Affairs, the Security Service of Ukraine and the NCSCC, evaluates each project’s strategic importance.

Only after this process the projects are presented to international partners for support. This two-level review guarantees that assistance aligns with Ukraine’s priorities and that donor resources are used efficiently.

As of now the Tallinn Mechanism unites 13 member states and well-known international institutions. Looking back, what achievements are you already proud of?

The progress achieved over the past year is remarkable. In 2025 alone, several major milestones were reached — Sweden’s €12.2 million support package, Norway’s €2.1 million annual contribution and Canada’s Can$ 3 million in funding activities that strengthen Ukraine’s preparedness against cyber threats.

We’ve already seen the implementation of initiatives that strengthen email and application security across government agencies, modernise IT infrastructure, develop robust systems to detect, prevent and respond to cyber threats, and train hundreds of cybersecurity professionals. These are not abstract achievements: they are real improvements that make Ukraine safer every day.

Experts say that the Tallinn Mechanism is helping Ukraine move from being mainly a recipient of aid to becoming a contributor in global cybersecurity. How do you see Ukraine’s role developing in the coming years?

Absolutely. And this transformation is already happening. Ukraine now shares its experience with partners who face similar challenges. The world has recognised that our expertise in defending against state-sponsored cyberattacks is unique and highly valuable.

Through the Tallinn Mechanism, Ukraine is moving from a reactive to a proactive model, where we not only receive support but also contribute knowledge and best practices to strengthen collective security. I believe Ukraine will play a key role in shaping a new “digital coalition” in Europe — a network of trusted partners defending democratic cyberspace together. Cooperation with EU CyberNet shows that it is very much a two-way street: the EU knowledge and expertise not only helps Ukraine, but also Ukraine’s experiences tackling cyber challenges are shared with the EU, directly impacting the collective cyber resilience in Europe. 

Finally, on a personal note. What keeps you motivated in such a demanding and high-stakes role?

For me, motivation comes from two things — people and purpose. I’m constantly inspired by the professionalism of our team and our colleagues across Ukrainian and international partner organisations.

As for purpose — every day I see proof that cooperation works. Together, we’re building something stronger than any single system or institution. The stakes are high, but so is the impact. That’s what keeps me going.



Keep reading similar articles
At TSD: a Call for Whole-of-Society Resilience Against Emerging Hybrid Threats

Director of EU CyberNet Liina Areng participated in a panel session titled “Technology and Hybrid Threats” at The Sydney Dialogue on 5 December 2025. She highlighted the importance of whole-of-society resilience against emerging hybrid threats which can be developed by systematic cyber capacity building, such as through EU CyberNet.

EU CyberNet Steering Committee Met in Brussels

EU CyberNet Steering Committee gathered on 27 November in Brussels at the Permanent Representation of Estonia to the European Union to take stock on past activities and discuss future actions.

Cyber Project Community Meeting Concluded in Brussels

EU CyberNet invited EU-funded cyber capacity building (CCB) projects and EU institutions for the annual Cyber Project Community Meeting in Brussels, Belgium on 28 November to coordinate EU external CCB building efforts, foster cooperation among projects and coherence with EU policies.

Cyber Project Community to Meet in Brussels This Week

This week on 28 November, EU CyberNet gathers EU-funded cyber capacity building (CCB) projects and EU institutions for a seminar in Brussels to coordinate EU external CCB building efforts, foster cooperation among projects and coherence with EU policies.

The 5th Blog Article of the EU CyberNet Expert Blog Series: Cyber Crisis Management in the AI Era: Confronting Disinformation and Hybrid Threats

EU CyberNet has published the fifth blog article in its Expert Blog Series. The fifth article, titled “Cyber Crisis Management in the AI Era: Confronting Disinformation and Hybrid Threats” is written by EU CyberNet Expert Dr. Troy E. Smith.

EU CyberNet at InCyber Forum: Discussing Strategic Cyber Capacity Building

Lauri Aasmann, EU CyberNet’s Training and Services Lead participated in a session on cyber cooperation and capacity building at the InCyber Forum on 14th October in Montreal, Canada. Panelists discussed how international cooperation, capacity building and digital diplomacy can strengthen collective resilience, safeguard critical infrastructure and uphold stability in an era of geopolitical tensions and growing cyber threats.