EU – Hybride Bedrohungen und Schutzmassnahmen
Hybrid CoE – European Centre of Excellence for Countering Hybrid Threats (EU–NATO platform)
https://www.hybridcoe.fiRobert Schuman Foundation – Hybrid threats: from geopolitics to internal security (incl. “democracy shield”, INTCEN fusion cell, critical infrastructure focus)
https://www.robert-schuman.eu/en/european-issues/819-hybrid-threats-from-geopolitics-to-internal-securityGPC Policy Brief (IE University) – Strengthening Europe’s actions against hybrid threats (Proteus programme, EU Cyber Command, sanctions regime, cooperation with UK/CH)
https://docs.ie.edu/GPC/3_AAFF_short%20CGP_Strengthening%20Europe's.pdfOlech – Hybrid threats to critical infrastructure in the European Union (22 recommended actions)
https://www.abw.gov.pl/ftp/foto/Wydawnictwo/terroryzm/wydanie-specjalne-2025/11_-_articles_-_A__Olech.pdfDGAP – European security in the era of hybrid warfare
https://dgap.org/en/research/publications/european-security-era-hybrid-warfareOSW – Resilience of the EU and NATO in an era of multiple crises
https://www.osw.waw.pl/en/publikacje/osw-commentary/2025-02-28/resilience-european-union-and-nato-era-multiple-crisesIED / Belgrade Security Conference – Counter hybrid threats in Europe (speech, strategic framing)
https://www.iedonline.eu/news/2025/belgrade.php
United Kingdom – NCSC &Resilience Initiatives
NCSC – AI to 2027 threat assessment (AI-enabled cyber threats, guidance for implementation)
https://www.ncsc.gov.uk/news/ai-to-2027-threat-assessmentIndustrial Cyber – NCSC warns UK critical systems face rising threats from AI-driven vulnerabilities (summary plus practical recommendations)
https://industrialcyber.co/threats-attacks/ncsc-warns-uk-critical-systems-face-rising-threats-from-ai-driven-vulnerabilities/National Security News – Britain’s cyber security agency warns of AI risks to CNI and elections (annual review insights)
https://nationalsecuritynews.com/2023/11/britains-cyber-security-agency-warns-of-ai-risks-to-critical-infrastructure-and-elections/UK Resilience Academy – UK Resilience Lessons Digest: Learning from cyber incidents (incident patterns and good practice derived from NCSC guidance)
https://ukresilienceacademy.org/wp-content/uploads/2025/06/UK-Resilience-Lessons-Digest-Issue-6-Learning-from-Cyber-Incidents-UK.pdf
Schweiz
Swiss Federal Department of Defence – The Security Policy Strategy of Switzerland 2026 (disinformation, hybrid warfare, CI resilience, AI implications)
https://www.sepos.admin.ch/dam/en/sd-web/bc4PAN7CoEsS/The%20Security%20Policy%20Strategy%20of%20Switzerland%202026.pdfSEPOS overview page – Security Policy Strategy 2026 (summary, three strategic directions, 40+ measures)
https://www.sepos.admin.ch/en/security-policy-strategySwiss Cyber Security Days – Program focus 2025: disinformation, AI, quantum-safe security (good “what’s on the agenda” view for CH risk officers)
https://www.scsd.ch/en/medienEuropean Parliament – Information manipulation in the age of generative AI (policy brief)
https://www.europarl.europa.eu/RegData/etudes/BRIE/2025/779259/EPRS_BRI(2025)779259_EN.pdf[1]UNESCO – Deepfakes and the crisis of knowing (societal & educational angle)
https://www.unesco.org/en/articles/deepfakes-and-crisis-knowingTime – What the numbers show about AI’s harms (recent, risk-focused synthesis)
https://time.com/7346091/ai-harm-risk/Deepfake statistics 2026 – Incidents, growth curves, fraud impact
https://programs.com/resources/deepfake-stats/WellSaid – How deepfakes reshape trust and security
https://www.wellsaid.io/resources/blog/dangers-of-deep-fakesNature – Continued influence of AI-generated deepfake videos
https://www.nature.com/articles/s44271-025-00381-9Global overview of deepfake laws and regulation
https://ondato.com/blog/deepfake-laws/Cross-cutting: governance, regulation, defense
World Economic Forum / AI and countering online disinformation
https://www.weforum.org/stories/2024/06/ai-combat-online-misinformation-disinformation/EU – AI code of practice for deepfake labeling
https://techpolicy.press/what-the-eus-new-ai-code-of-practice-means-for-labeling-deepfakesUS IC3 / PSA on Russian government cyber actors (networking & infrastructure)
https://www.ic3.gov/PSA/2025/PSA250820
AI-getriebene Desinformation und Entscheidungsbeeinflussung
Frontiers in AI – AI-driven disinformation: policy recommendations
https://www.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2025.1569115/fullHarvard Kennedy School Misinformation Review – Susceptibility to AI-synthesized images
https://misinforeview.hks.harvard.edu/article/people-are-more-susceptible-to-misinformation-with-realistic-ai-synthesized-images/Wired – AI-powered disinformation swarms and democracy
https://www.wired.com/story/ai-powered-disinformation-swarms-are-coming-for-democracy/East Asia Forum – Bots, buzzers and AI-driven campaigning
https://eastasiaforum.org/2025/07/25/bots-buzzers-and-ai-driven-campaigning-distort-democracy/CIGI – AI electoral interference in 2025
https://www.cigionline.org/articles/then-and-now-how-does-ai-electoral-interference-compare-in-2025/First Amendment Center – Political deepfakes and elections
https://firstamendment.mtsu.edu/article/political-deepfakes-and-elections/
Deepfake production, DaaS und Betrug
“Deepfakes leveled up in 2025 – here’s what’s coming next”
https://theconversation.com/deepfakes-leveled-up-in-2025-heres-whats-coming-next-271391Cyble – Deepfake-as-a-Service exploded in 2025
https://cyble.com/knowledge-hub/deepfake-as-a-service-exploded-in-2025/DeepStrike – Deepfake statistics 2025, AI fraud data & trends
https://deepstrike.io/blog/deepfake-statistics-2025OpenFox – Deepfakes and their impact on society
https://www.openfox.com/deepfakes-and-their-impact-on-society/European Parliament – Children and deepfakes
https://www.europarl.europa.eu/RegData/etudes/BRIE/2025/775855/EPRS_BRI(2025)775855_EN.pdf[18]North Korea (DPRK): AI, deepfakes
INSS – Evolution of North Korea’s cyber influence operations
https://inss.re.kr/upload/bbs/BBSA05/202406/F20240620130910170.pdfNK News – “JucheGPT”: How North Korea can weaponize AI to sway elections
https://www.nknews.org/pro/juchegpt-how-north-korea-can-weaponize-ai-to-sway-elections-and-sow-discord/BankInfoSecurity – North Korean hackers using AI in advanced cyberattacks
https://www.bankinfosecurity.com/north-korean-hackers-using-ai-in-advanced-cyberattacks-a-24184Unit 42 (Palo Alto) – North Korean synthetic identity & deepfake-enabled operations
https://unit42.paloaltonetworks.com/north-korean-synthetic-identity-creation/Genians – AI-driven deepfake military ID fraud (Kimsuky)
https://www.genians.co.kr/en/blog/threat_intelligence/deepfakeAnadolu / GSC – North Korea-linked hackers using AI deepfake in spear phishing
https://www.aa.com.tr/en/asia-pacific/north-korea-linked-hackers-target-south-korean-defense-related-organization-using-ai-deepfakes-report/3010478CSIS – Sustaining U.S.–ROK cyber cooperation against North Korea
https://www.csis.org/analysis/deterrence-under-pressure-sustaining-us-rok-cyber-cooperation-against-north-koreaRadware – Lazarus Group / APT38 threat actor profile
https://www.radware.com/cyberpedia/ddos-attacks/the-lazarus-group-apt38-north-korean-threat-actor/The Hacker News – Disruption of Russian, North Korean and Chinese AI ops
https://thehackernews.com/2025/10/openai-disrupts-russian-north-korean.html
Israel: cyber, intelligence and disinformation
ETH Zurich CSS – Israel’s national cybersecurity and cyberdefense posture
https://css.ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/Cyber-Reports-2020-09-Israel.pdfWest Point Lieber Institute – Cyber war in the Middle East
https://lieber.westpoint.edu/firewalls-fault-lines-cyber-war-middle-east/Al-Shabaka – Israel’s disinformation apparatus
https://al-shabaka.org/briefs/israels-disinformation-apparatus-a-key-weapon-in-its-arsenal/CIDOB – Israeli disinformation that fractures Europe
https://www.cidob.org/en/publications/israeli-disinformation-fractures-europeUNISPAL / UNRWA statement on disinformation
https://www.un.org/unispal/document/unrwa-statement-04dec24/Al-Zaytouna Centre – Israeli intelligence penetration in Arab states
https://eng.alzaytouna.net/2026/01/05/academic-paper-israeli-intelligence-penetration-in-arab-states/Crisis Group / flashpoints in Israel–Iran dynamics
https://www.crisisgroup.org/trigger-list/iran-usisrael-trigger-list/flashpoints/israelOutpost24 – Hacktivist cyber operations in Iran–Israel conflict
https://outpost24.com/blog/hacktivist-cyber-operations-iran-israel/
Russia: Gerasimov doctrine, AI and critical infrastructure
Georgetown Security Studies Review – Russia’s strategic understanding of cyber
https://georgetownsecuritystudiesreview.org/2018/12/05/russia-strategic-understanding-of-cyber-not-an-information-war-a-war-on-information/UK Government – Russia’s FSB malign cyber activity factsheet
https://www.gov.uk/government/publications/russias-fsb-malign-cyber-activity-factsheet/russias-fsb-malign-activity-factsheetACIG Journal – Use of cyber tools by the Russian military (lessons from Ukraine)
https://www.acigjournal.com/The-Use-of-Cyber-Tools-by-the-Russian-Military-Lessons-from-the-War-against-Ukraine,190142,0,2.htmlIndustrial Cyber – Russian state-sponsored hackers’ capabilities versus critical infrastructure
https://industrialcyber.co/cisa/russian-state-sponsored-cyber-criminal-hackers-stage-demonstrated-threats-capabilities-to-critical-infrastructure/Industrial Cyber – Pro-Russia hacktivists intensifying OT intrusions
https://industrialcyber.co/news/global-agencies-sound-alarm-as-pro-russia-hacktivist-groups-intensify-ot-intrusions/Vectra AI – Pro-Russia hacktivists targeting critical infrastructure
https://www.vectra.ai/blog/pro-russia-hacktivists-are-targeting-critical-infrastructureCyble – Hacktivists escalate critical infrastructure attacks in 2025
https://cyble.com/blog/hacktivists-critical-infrastructure-attacks-2025/Latvia SAB / ICS threat warning
https://industrialcyber.co/industrial-cyber-attacks/latvias-sab-warns-of-russian-ics-cyber-threat-to-european-and-western-critical-infrastructure/Infosecurity Magazine – Wiper attack on Polish power grid
https://www.infosecurity-magazine.com/news/wiper-attack-polish-power-grid/Industrial Cyber / global agencies advisories aggregation
https://industrialcyber.co/news/global-agencies-sound-alarm-as-pro-russia-hacktivist-groups-intensify-ot-intrusions/
Auf den Führungsalltag ausgerichtet
Zur Senkung des “Delay in Decision” und zur Ausweitung von Handlungsspielräumen für Entscheider auf Fach- und Fphrungsebene
Das gesamte Enterprise Early Warning Framework basiert auf den Vorgaben der Decision Driven Intelligence. Dies bedeutet, wird jemand nicht zeitgerecht und verarbeitungsgerecht informiert und alarmiert, so kann er auch nicht zielgerichtet entscheiden und zweckgerecht handeln
Auf Krisenszenarien parametrisiert
Das Gesamte Framework ist darauf ausgerichtet, disruptive Ereignisse und Ereignisketten zu erfassen.
Die Ergebnisse aus diesen “Früherkennungs-Domänen” können sowohl einzeln, aber auch im Verbund für die Führungsarbeit und den Aufbau von Unternehmensresilienzen aufgesetzt werden
Market Resilience
Supplychain Resilience
Servicechain Resilience
Organisational Aspects
Krisenbereitschaft und Business Resilience
Zur Erweiterung von Reaktions- und Handlungsspielraum
Das HRO-Framework wurde etabliert, um Organisationen und Führungskräften neben den proaktiven Elementen der Krisenreaktion (abgedeckt im Early Warning Frame.work) auch die Reaktiven Aspekte zu etablieren.
Für das Senken der Cost of Interruption
Das EEWF zielt darauf ab, den potentiellen Kostenverlauf eines Unterbruches möglichst niedrig zu halten. Er berücksichtigt daher auch schon die Hygienefaktoren, welche genutzt werden können, bevor es zum Einsatz von Früherkennungs- und Frühwarnmechanismen kommt
Dies bezieht sich auf die Handlungsebenen
Krisenkompetenz innerhalb der Organisation
Kontextanalyse - Nutzung von erfahrenen und ausgebildeten Mitarbeitern als Frühwarnsensoren
Berücksichtigung der Safetyculture innerhalb des Unternehmens
Datenkompetenz und Reifegrad im Datenmanagement
Services rund um das Framework
Integration in schon bestehende Compliance-Elemente
Early Warning Systems Implementierung
Early Warning as a Service
ESG-Reporting as a Service
Crisis Management Training

