CY-TRUST: The project underway to boost Cyprus’ defence against cyber threats

The Digital Security Authority is coordinating a project that aims to boost situational awareness, incident handling, and joint preparedness, to strengthen Cyprus' defence against cyber threats.

The project, CY-TRUST, will see the creation Sectorial Security Operations Centres (Sectorial SOCs) covering energy, maritime, government and SMEs – Business.

CY-TRUST will assess the maturity, capacity, and needs of Cyprus’ SOCs (CSOCs), which includes evaluating existing cybersecurity capabilities using models like the SOC Capability & Maturity Model and ENISA CSIRT Maturity Framework, along with questionnaires and interviews. The results will guide the design, implementation, and evaluation of sector-specific CSOCs.

AI-enhanced situational awareness, coordinated response, and joint preparedness

The CSOCs will ensure AI-enhanced situational awareness, coordinated response, and joint preparedness. Based on the CSOC Blueprint, the CSOCs will feature AI-supported situational awareness, including Machine Learning-based User & Entity Behaviour Analytics (UEBA) and Cyber Threat Intelligence (CTI) analytics. They will use shareable playbooks for incident response and provide training through Cyber Range programs, exercises, and online platforms. Feedback loops will improve collaboration and effectiveness among cybersecurity stakeholders.

CY-TRUST will then test and validate CSOC variants at both sectorial and national levels, involving stakeholders like the National Authority and Operators of Essential Services (OESs). This includes a preliminary Proof-of-Concept (PoC) assessment followed by full-scale validation across all sectors. Results will guide future sectorial SOC development in Cyprus and inform the National Cybersecurity Strategy, adapting to evolving developments in the field.

CY-TRUST aims to ensure the project results’ visibility, impact, and sustainability, aligning with national cybersecurity strategy, NIS and NIS2 compliance, and European cross-border collaboration.

Three-stage approach

A three-stage approach will be followed for designing, developing, delivering, and evaluating the platform, focusing on two key aspects:

• Establishing a comprehensive baseline for sectorial SOCs in Cyprus to assess CY-TRUST’s impact and inform future cybersecurity planning efforts, aligning with the EU’s strategy.
• Producing and assessing a Proof-of-Concept of CY-TRUST on a limited scale to identify integration challenges early and adapt CSOCs accordingly, ensuring success in the full-scale evaluation planned for the third year.

Partner integration in CY-TRUST architecture

The project has received funding from the European Union’s Digital Europe Programme and the relevant consortium is coordinated by the DSA, with partners the Cyprus Chamber of Commerce and Industry (CCCI), Open University of Cyprus, Deputy Ministry of Research, Innovation and Digital Policy, Electricity Authority of Cyprus, Shipping Deputy Ministry of Cyprus, Cyprus Port Authority, Eurogate Container Terminal Limassol Limited, Cyentific AS and Cyberalytics Limited.

The project’s partners are strategically aligned with CY-TRUST’s architectural elements to maximise their contributions. The consortium partners are mapped to their most relevant elements: The National Authority in red, technology providers in purple, and end-users in blue. This mapping is visually represented in a diagram showcasing how each partner will be utilised for the implementation of the project.

For more information about the CY-TRUST project and its initiatives, click here