Protecting emergency coordination and public-safety services from cyberattacks
Use case: UC1.4.1
Location: València, Spain
Led by: Valencia Local Police
The challenge
Emergency coordination services depend on secure and resilient digital infrastructure. A cyberattack affecting communications, dispatch systems or internal networks could disrupt police operations precisely when they are most needed.
Led by Valencia Local Police, this use case will explore how GANNDALF can help public-safety organisations detect cyber threats earlier, understand their potential impact and coordinate an effective response while maintaining essential services.
The scenario
The pilot will simulate an escalating cyberattack against the digital environment supporting the Integrated Security and Emergency Centre (CISE) of Valencia Local Police, from which police resources and operations are coordinated.
The scenario may combine threats such as phishing, credential compromise, ransomware-related activity and pressure on communications systems. Participants will have to identify warning signs, assess risks, analyse the incident and take coordinated action to contain it.
The exercise will be conducted in a secure and isolated environment that replicates relevant operational functions without affecting live police systems. Synthetic data will be used to ensure operational safety and compliance with data-protection requirements.
GANNDALF in action
During the pilot, GANNDALF solutions will support different stages of the response:
- identifying vulnerabilities and assessing risks to critical assets;
- detecting unusual activity and generating early warnings;
- visualising the development and impact of the incident;
- supporting forensic analysis and coordinated response;
- protecting sensitive information and maintaining service continuity; and
- transforming lessons learned into updated procedures and preparedness plans.
The exercise will combine technical preparation, operator training, practical simulation and a final evaluation involving project partners and relevant stakeholders.
Expected impact
The pilot will assess whether the GANNDALF ecosystem can contribute to:
- faster detection and containment of cyber threats;
- improved situational awareness and decision-making;
- greater resilience of police coordination services;
- stronger cooperation between operational and technical teams;
- practical improvements to training and incident-response procedures; and
- updated operational guidelines and preparedness plans.
From experimentation to preparedness
Feedback from operators and technical staff will be central to the evaluation. The results will help refine GANNDALF’s tools and translate the lessons from the exercise into practical recommendations for Valencia Local Police and other European law enforcement agencies.
