The mid-term review of the CYRENE project was successfully held on the 5 th of April 2022. The objectives
of the review were to present: a) how tailored and risk-based security and privacy certification schemes
are applied to supply chains of ICT systems, b) the novel dynamic cybersecurity and privacy conformity
processes that support different types and levels of conformity assessment, c) the population of cyber assets, threats and vulnerabilities in the support of a collaborative, multi-level evidence-driven supply chain risk and privacy assessment approach, d) the mitigation strategies, and e) the validation of the
above mentioned within the holistic CYRENE Solution via its application to real life supply chain services.
The CYRENE Team successfully reported the project progress from month M01 to month M18. It presented the work performed cumulatively and per partner as well as the Conformity Assessment Methodology, the Supply Chain Services Conformity and Certification Assessment Scheme, the dual approach towards Risk and Conformity Assessment (RCA) and the main outputs of the project.
The UBITECH Team is the Technical Coordinator and WP3 Leader of the CYRENE project. During the review, we thoroughly presented the Technical Overview of the project including, the CYRENE drivers, functional & non-functional requirements, the RCA implementation, the CYRENE Ontology which models diverse entities and their relations from the cyber assets to software and system’s users, the technical Architecture and the early prototypes.
We performed a live demo of the current CYRENE functionalities, how these functionalities support the different steps of the RCA Methodology, how the CYRENE Ontology has been reflected into the relational schema of CYRENE, as well as different vertical functionalities coming from the Anomaly Detection, Dark Web Crawler and Miner, Dynamic Vulnerabilities Assessment and Attack Behavioral Simulation modules. The comments received by the reviewers were precise and encouraging, as the project has fully achieved its objectives and milestones in the reporting period and all deliverables have been accepted.
The project has delivered according to the EC reviewers exceptional results with significant immediate impact in the reporting period. It achieved significant progress especially in the recent 6 months both from the technical but also from the dissemination, communication and impact perspective. The overall evaluation of the activities is positive and recommendations for future activities have been provided by the reviewers.
