# EUCOM Directs Contractor Security Practices

U.S. European Command (EUCOM) security and readiness guidance directs contractors working in its theater to protect information about operations and deployments, use phishing-resistant authentication, and keep software current. The page is operational guidance—not legislation, an acquisition-policy change, or a contract announcement—so it does not create a new procurement opportunity or specify a deadline, but it highlights security practices relevant to contractors supporting EUCOM activities.

- Contractors operating in the theater should follow the stated operational-security and cybersecurity practices, including safeguarding operational and deployment information.
- Companies supporting EUCOM can use the guidance to review their authentication and software-update practices; the signal does not specify a new contract requirement or compliance date.
- The guidance names NordVPN and ExpressVPN as examples of commercial VPNs for personnel use, not as awardees or selected procurement vendors.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** November 06, 2026

### Government Entities
- United States European Command (EUCOM)

### Vendors
- NordVPN ()
- ExpressVPN ()

### Sources
- [United States European Command](https://www.eucom.mil/staff-resources/eucom-theater-vigilance-information-resource-page) - Eucom