Enhancing Operational Planning and Situational Awareness for Cyberspace Operations (CO), Based on the Crossed Swords Exercises

Authors

  • Marko Arik Department of Software Science, Tallinn University of Technology Tallinn
  • Rain Ottis Department of Software Science, Tallinn University of Technology Tallinn
  • Adrian Venables Department of Software Science, Tallinn University of Technology Tallinn
  • Ricardo Lugo Department of Welfare, Østfold University College, Halden, Norway

DOI:

https://doi.org/10.34190/eccws.24.1.3327

Keywords:

Cyber Operations, Visualising Cyber Planning, Cyber Planning tool, Situational awareness, User Requirements

Abstract

Cyberspace Operations (CO) planners face unique challenges in modern warfare, requiring a comprehensive understanding of cyberspace layers and a systematic planning framework. Exercises such as Locked Shields and Crossed Swords (XS) enhance cybersecurity skills, teamwork, and decision-making under pressure. Visual planning tools can improve operational planning and situational awareness in COs by providing a holistic picture of the operating environment. This facilitates better decision-making and coordination and fosters a cooperative defence mindset among allies. Using lessons from XS, this study uses a design science methodology to create a Cyber Planner application. The research team was able to observe current procedures, evaluate the efficacy of current tools, and get input from CO planners participating in the exercise. XS offered a valuable framework for identifying operational issues in cyber operations planning. Through iterative design modifications based on user experiences and needs, the exercise provided a real-world testing ground to assess the Cyber planners’ initial version. The study intends to improve situational awareness and operational planning skills in cyberspace using the lessons acquired from the exercise. The user requirements for the Cyber Planning tool were identified through a literature review and interviews, resulting in 30 user requirements included in an online survey. The online survey, which was directed at CO planners, validated most of the identified user requirements, ensuring the tool meets the demands and expectations of its intended users. Integrating risk management into a CO planning tool can improve situational awareness, response times, and defence strategies, enabling real-time monitoring, analysis, and decision-making. Advanced data visualisation and Cyber planning tools are needed for improved decision-making.

Author Biographies

Marko Arik, Department of Software Science, Tallinn University of Technology Tallinn

With 25 years of IT and Cyberspace Operations expertise, a founding member and commander of the Estonian Defence Forces Cyber Incident Response Capability and the founder of Estonian Defence Forces Cyber Operations. Now retired from the armed forces, currently a cyberspace operations researcher at TalTech and NATO CCDCOE.

Rain Ottis, Department of Software Science, Tallinn University of Technology Tallinn

Dr Rain Ottis is the Professor of Cyber Operations and the Program Manager for the Cybersecurity MSc at Tallinn University of Technology, Estonia. From 2008 to 2012 he served as a researcher at the NATO Cooperative Cyber Defence Centre of Excellence, where he worked on cyber security in the context of national and international security. Prior to that assignment, he served as a communications officer in the Estonian Defence Forces, focusing primarily on cyber defence training and awareness. His research interests include cyber conflict, national cyber security, cyber defence exercises and the role of serious games in cyber security.

Adrian Venables, Department of Software Science, Tallinn University of Technology Tallinn

Dr Adrian Nicolas Venables served in the UK Royal Navy for over 24 years as a Communications, Warfare, and Intelligence officer. Since leaving the service, he has published a series of journal articles and research papers on the cyber threat landscape and its use by state and non-state actors for espionage, sabotage, and subversion. Dr Venables joined the Tallinn University of Technology in Estonia as a senior researcher in 2018, specializing in cyber strategy and its role in information and influence operations.

Ricardo Lugo, Department of Welfare, Østfold University College, Halden, Norway

Dr. Ricardo Gregorio Lugo is a Senior Researcher at the Estonian Maritime Academy, Tallinn University of Technology, and an Adjunct Associate Professor at Østfold University College in Norway. He holds a PhD in Psychology from Johannes Gutenberg University Mainz, focusing on cognitive performance in cyber defense. His research interests span human factors, cognitive engineering, sport psychology, stress and performance, and cyber psychology. He is currently participating in European projects focusing on cybersecurity education, authored numerous peer-reviewed publications, and actively participates in academic and international research collaborations.

Downloads

Published

2025-06-25