The dates will be confirmed after the elections to the European Parliament in May 2019.
Last week, a kick-off meeting was held at EDA to launch the contractual work on the Cyber Defence Situation Awareness Package Rapid Research Prototype (CySAP-RRP) project, in the presence of representatives of the three contributing Member States: Spain (lead country), Germany and Italy. The industry consortium in charge of the project (INDRA Sistemas SA, Leonardo S.p.a and Fraunhofer) provided Member States with an overview of the project management plan describing tasks, milestones and project deliverables.
The project was conceived as the first step of a spiral development in order to set up a full Cyber Situation Awareness operational capability. The CySAP-RRP will be built upon previous work done by EDA to develop a Target Architecture and System Requirements for an enhanced Cyber Defence Situation Awareness Capability.
The core objectives of the project include essential research challenges to assist military decision-makers in cyberspace and to set the basis for a fully-fledged Command and Control (C2) system for cyber operations.
CySAP is at the forefront of technology development with the aim of obtaining a common and standardized cyber defence planning and management functional area service. The research challenges are to provide a comprehensive understanding of the cyber defence elements in the planning and conduct phase of military operations in which cyberspace is now recognised and treated as any other domain such as land, air or maritime.
Under the framework of EDA, the three Member States participating in CySAP agreed a common set of requirements and a Target Architecture for the capability. CySAP follows a modular approach allowing to have a flexible set of functionalities by exercising a system engineering process. Current market available solutions for cyber situational awareness do not meet the entire spectrum of military requirements such as risk analysis, cyber related Courses of Action (CoA) development and assessment as well as support to decision-making. CySAP will provide situational analysis that can be integrated into the overall common operational picture of a mission, as a cyber information layer able to provide timely and accurate situational awareness. CySAP is set to obtain innovative solutions by joining efforts of leading defence industries and researchers in Europe.
The architectural design comprises several spirals to be completed in the next years subject to future investments. The possibility to introduce CySAP follow-on activities into PESCO or the EDIDP are currently explored and assessed. The next progress review meeting is scheduled for September 2019 in Spain.
The updated EU Capability Development Plan (CDP) endorsed by the EDA Steering Board in June 2018 reconfirmed cyber defence as a priority for capability development in the EU. The CDP recognises the need for defensive cyber operations in any operational context, based on sophisticated current and predictive cyberspace situational awareness. This includes the ability to combine large amounts of data and intelligence from numerous sources in support of rapid decision making and increased automation of the data gathering, analysis and decision-support process.
In November 2018, the European Council adopted an updated version of the EU cyber defence policy framework (CDPF). Supporting the development of Member States’ cyber defence capabilities is a priority area where the now established CySAP project serves as a core to guide future research and operational capabilities.
‘Locked Shields’, the world’s biggest and most advanced international cyber defence exercise involving life-fire attacks, is organized annually by NATO’s Cooperative Cyber Defence Centre of Excellence (CCD COE) in Tallinn. This year’s edition will take place from 9-12 April with some 1,000 experts from around 30 nations participating. EDA will support the strategic track part of the exercise.
The exercise will see a Red team (based in Tallinn) attacking Blue Teams made up by CCD COE member states (based at exercise locations in their capitals) who will act as national rapid reaction teams deployed to assist a fictional country in handling large-scale cyber incidents and all their multiple implications. The main task of the Blue Teams is to protect and maintain their services and networks against these life attacks. Besides countering the technical attacks, information sharing, teamwork and cooperation will also be key aspects to be tested in this exercise.
With its rich expertise and experience gained from several strategic decision-making exercises organised with Member States over recent years, EDA will support the ‘Locked Shields 2019 Strategic Track’, a parallel, table-top decision-making exercise track playing in the same fictitious, sovereign state under severe cyber-attacks from an aggressive neighbour. Participating Blue Teams will act as rapid reaction teams and advisors. High-level cyber/hybrid crisis management and legal decisions have to be made in accordance with national, EU, NATO and UN regulations by those Blue Teams. The roles of NATO, EU and UN will be played by a “White Team”, including EDA.