The increasing digitalisation and decentralisation of the power grid, driven largely by solar and wind integration, introduce significant cybersecurity vulnerabilities. A growing number of distributed renewable energy assets are connected to DSO grids. TSO–DSO coordination ensures comprehensive risk mitigation across all voltage levels, enhances system-wide resilience, while also promoting coordinated response mechanisms and shared situational awareness across the grid. The activity focuses on the exchange of information and alignment of perspectives between TSOs and DSOs.