Blog posts

2026

Thoughts on Cyber Exercises, Time Compression, and Situation Awareness

3 minute read

Published:

Throughout my career, I have had the opportunity to participate in a wide range of cyber exercises. Most recently, I took part in a large-scale multinational exercise. As a strong advocate of situation awareness, one design choice consistently stands out across these environments: time compression.

The long and painful journey from detection to understanding

2 minute read

Published:

In my experience, the gap between the capability to perceive and the capability to comprehend is significant. I have encountered this challenge both in my studies and in my professional life. I believe this is a critical factor to consider on the path to achieving situation awareness. If we have the data, why is it so difficult to analyze it in a way that leads to true comprehension?

Defining Situation Awareness

3 minute read

Published:

The more I talk about situation awareness (SA) in the context of cyber security, the more I find myself drawn into conversations about the term. The most common challenge I face is the question of whether it is ‘situation awareness’ or ‘situational awareness’. This issue can be approached from a semantic, terminological or conceptual perspective. However, I will address this issue by making a subjective decision on this matter. This does not mean that the decision is right or wrong, or that it should be followed. It is simply my own decision.