Abstract: Computer emergency response teams (CERTs) of the public sector provide advisory, preventive, and reactive cybersecurity services for authorities, citizens, and enterprises. However, their tasks of monitoring, analysing, and communicating threats to establish cyber situational awareness are getting more complex