SOCCRATES focused directly on SOC/CSIRT response systems, and STOP-IT addressed cyber-physical threat protection — both requiring operational security expertise.
MNEMONIC AS
Norwegian managed security services provider contributing operational SOC, threat intelligence, and incident response expertise to European cybersecurity research.
Their core work
Mnemonic is a Norwegian cybersecurity firm specializing in managed security services, threat intelligence, and incident response. They operate Security Operations Centers (SOC) and provide CSIRT capabilities for organizations facing advanced cyber threats. In H2020 projects, they contribute real-world operational expertise in threat detection, attack modelling, and automated response systems — bridging the gap between cybersecurity research and frontline defense operations.
What they specialise in
SOCCRATES specifically developed attack defence graphs, threat prediction, and business impact modelling capabilities.
STOP-IT addressed cyber-physical threats to water infrastructure, demonstrating application of security skills to critical infrastructure domains.
ESSENTIAL (MSCA training network) aimed to educate next-generation security experts across multiple disciplines.
How they've shifted over time
Mnemonic's H2020 involvement began in 2017 with a broad focus on security science, policy, and training the next generation of security professionals through the ESSENTIAL MSCA network. By 2019, their participation shifted decisively toward applied, operational cybersecurity — threat intelligence, automated SOC response, and attack defence graph modelling in SOCCRATES. This trajectory reflects a move from contributing to the security research ecosystem toward embedding their commercial SOC/MSSP expertise directly into EU-funded defensive tools.
Mnemonic is moving toward AI-driven, automated threat detection and response tools — expect future work in machine learning for SOC operations and proactive cyber defence.
How they like to work
Mnemonic operates exclusively as a participant or third-party contributor, never as coordinator — consistent with a commercial company contributing domain expertise rather than managing research agendas. Despite only three projects, they have worked with 49 partners across 16 countries, indicating they join large, multi-national consortia where their operational cybersecurity knowledge complements academic and public sector partners. They are a specialist brought in for real-world threat expertise, not a project management hub.
Mnemonic has collaborated with 49 unique partners across 16 countries through just three projects, reflecting participation in large security-focused consortia with broad European reach. Their network spans academic, public, and private sector organizations working on cybersecurity challenges.
What sets them apart
Mnemonic brings something rare to EU research consortia: active, commercial SOC and managed security operations experience. While many cybersecurity project partners are universities or research institutes, Mnemonic handles real threats daily as an MSSP, giving them ground-truth insight into what works in production environments. For consortium builders, they offer a direct line between research prototypes and operational deployment in live security operations centers.
Highlights from their portfolio
- SOCCRATESTheir largest funded project (EUR 641K), directly aligned with their core MSSP business — developing automated SOC response tools using attack defence graphs and AI-driven threat prediction.
- STOP-ITDemonstrates cross-domain application of cybersecurity to critical water infrastructure, showing ability to adapt security expertise to sector-specific physical-cyber threats.