Work Packages & Deliverables

The objective of WP1 is to ensure the efficient management, coordination and quality assurance of the SIEMBIOT project throughout its lifetime. The work package provides the governance framework necessary for successful project implementation while ensuring compliance with the Digital Europe Programme requirements.

WP1 coordinates project planning, consortium collaboration, communication activities, quality assurance and risk management. It also supports dissemination activities and engagement with relevant stakeholder communities, including Security Operations Centres (SOCs), Computer Security Incident Response Teams (CSIRTs) and organisations operating in sectors covered by the NIS2 Directive.

WP2 establishes the technical foundation of the SIEMBIOT platform by defining the overall architecture, functional requirements and system design. The work package specifies the technical framework required to build a scalable, secure and interoperable cybersecurity platform integrating SIEM, SOC, NOC, Cyber Threat Intelligence and Vulnerability Management services.

It also evaluates suitable open-source technologies, designs the shared services architecture and defines the interfaces required to support collaborative cybersecurity operations.

WP3 delivers the implementation and deployment of the SIEMBIOT platform. The work package develops an integrated multi-tenant cybersecurity platform capable of providing Security Operations Centre as a Service (SOCaaS) while combining monitoring, threat intelligence, vulnerability management and advanced analytics.

The platform integrates open-source cybersecurity technologies into a unified operational environment, enabling rapid onboarding of beneficiary organisations while maintaining secure separation between tenants and shared central services.

WP4 focuses on the operational deployment and day-to-day operation of the SIEMBIOT platform. The work package supports beneficiary selection and onboarding, delivers continuous cybersecurity monitoring services and enables collaborative threat intelligence sharing across participating organisations.

The platform provides integrated NOC, SIEM, SOC, CTI and Vulnerability Management services while generating operational metrics that demonstrate the effectiveness of the deployed cybersecurity capabilities. The work package also includes continuous professional training and certification activities for cybersecurity specialists.

WP5 establishes the collaborative cybersecurity research environment by developing an anonymised research data lake and collaborative web portal. The work package enables authorised partners to aggregate operational cybersecurity data, perform advanced research and develop innovative threat detection methods using real-world information collected from the SIEMBIOT platform.

The collaborative environment supports experimentation, threat hunting, incident response research and knowledge sharing while ensuring data privacy and security.

WP6 ensures the long-term sustainability and continuous evolution of the SIEMBIOT platform through collaborative research, interoperability and knowledge sharing. The work package promotes collaboration between SIEMBIOT partners, Security Operations Centres, CSIRTs and other cyber defence organisations by supporting the exchange of threat intelligence, advanced threat hunting techniques and incident response knowledge.

It also delivers partner onboarding resources, publishes research updates and supports continuous training activities that encourage the adoption and further development of the SIEMBIOT platform across the European cybersecurity community.