The Project
Aim
The EU’s drive to enhance cybersecurity has led to initiatives targeting key services in Europe. The CY-TRUST project (“CYpriot secToRial secUrity operationS cenTres”) aims to strengthen Cyprus’s defenses by creating Sectorial Security Operations Centres (SOCs) for Energy, Maritime, Governmental, and SMEs sectors, linked to the Digital Security Authority (DSA). Using a new Cyber Security Operations Centres (CSOCs) Blueprint, the project promotes cooperation for shared awareness, coordinated incident handling, and joint preparedness. Adopting European and international standards, CY-TRUST ensures interoperability and coordination at national and European levels.
Objective 1
CY-TRUST will assess the maturity, capacity, and needs of Cyprus’s critical sectors to design Sectorial Cyber Security Operations Centers (CSOCs). This includes evaluating existing cybersecurity capabilities using models like the SOC Capability & Maturity Model and ENISA CSIRT Maturity Framework, along with questionnaires and interviews. The results will guide the design, implementation, and evaluation of sector-specific CSOCs.
Objective 2
CY-TRUST will develop tailored Sectorial Cyber Security Operations Centers (CSOCs) for different sectors in Cyprus, incorporating AI-enhanced situational awareness, coordinated response, and joint preparedness. Based on an assessment of sectorial profiles, at least three CSOC variants will be specified, aligning with the CSOC Blueprint and adapted to each sector’s needs.
Objective 3
CY-TRUST will develop and deploy Sectorial Cyber Security Operations Centers (CSOCs) that interface with Cyprus’s National SOC. Based on the CSOC Blueprint, these CSOCs will feature AI-supported situational awareness, including Machine Learning-based User & Entity Behavior Analytics (UEBA) and Cyber Threat Intelligence (CTI) analytics. They will use shareable playbooks for incident response and provide training through Cyber Range programs, exercises, and online platforms. Feedback loops will improve collaboration and effectiveness among cybersecurity stakeholders.
Objective 4
CY-TRUST will test and validate CSOC variants at both sectorial and national levels, involving stakeholders like the National Authority and Operators of Essential Services (OESs). This includes a preliminary Proof-of-Concept (PoC) assessment followed by full-scale validation across all sectors. Results will guide future sectorial SOC development in Cyprus and inform the National Cybersecurity Strategy, adapting to evolving developments in the field.
Objective 5
CY-TRUST aims to ensure project results’ visibility, impact, and sustainability, aligning with national cybersecurity strategy, NIS and NIS2 compliance, and European cross-border collaboration. It will employ dissemination, communication, and exploitation activities to enhance visibility, including contributions to standards. Interoperable information exchange mechanisms will be facilitated, spanning national and EU-level alerting and reporting. Validation outputs will inform stakeholder assessment and wider adoption pathways across Cyprus and other Member States, aligned with critical sector resilience and interaction with agencies, authorities, and research projects.
