ECYSAP EYE: From Cyber Situational Awareness to Mission-Centric Decision Support for Enhanced Cyberspace Operations
2026-06-10 • Cryptography and Security
Cryptography and Security
AI summaryⓘ
The authors describe ECYSAP EYE, a system designed to improve Cyber Situational Awareness (CySA) for operational organizations. Their approach organizes different types of mission-relevant information—called artefacts—into seven groups that help move from understanding cyber threats to making decisions and acting on them. The architecture supports gradual implementation and aids in mission planning and execution by linking perception, reasoning, and action. The paper focuses on how this system structure can be transferred into real-world use.
Cyber Situational AwarenessSystem-of-SystemsRecognized Cyberspace PictureWhat-If AnalysisOption RecommendationsDashboardAction EnforcementAfter-Action ReportsMission PlanningCyber Defense
Authors
Pantaleone Nespoli, Daniel Díaz-López, Sergio Lopez Bernal, Francisco Oliva Bermejo, Pedro González Megías, Jorge Maestre Vidal, Víctor Sobrino García, Gregorio Martínez Pérez
Abstract
Operational organizations increasingly require Cyber Situational Awareness (CySA) capabilities that go beyond isolated technical alerts, providing mission-relevant artefacts that can be embedded into heterogeneous toolchains and cyber security or cyber defense processes. ECYSAP EYE addresses this need through an adoption-oriented System-of-Systems (SoS) architecture centered on seven groups of mission-focused artefacts: the Recognized Cyberspace Picture (RCyP), Cyber Situational Reports (CySRs), the What-If Analysis Report (WIAR), Option Recommendations (OPRE), an operator Dashboard/HMI (DSH), Action Enforcement (AE), and After-Action Reports (AAR). The ECYSAP EYE architecture structures the transition from perception (full-spectrum RCyP views), to decision-oriented reasoning (WIAR/CySRs/OPRE), and to operational execution and learning (DSH/AE/AAR), with explicit integration surfaces that support incremental deployment and validation. This paper presents this innovative project from a technology transfer perspective, summarizing the updated architecture, the functional role of seven groups of artefacts, and the expected impact of cyber situations on the decision-making process in the context of a mission planning and execution.