Knowledge · Situational awareness
A real-time operational picture can show a false situation even when the technology works
Why a technically working real-time operational picture can show an incomplete or misleading security situation, and what matters here.
Updated: · MOVETOS
Yes. A technically working real-time operational picture can convey an incomplete or misleading security situation if the data captured is not sufficient to assess the actual situation reliably. [1]
Working systems do not capture everything
Cameras, sensors and software can work flawlessly without capturing every security-relevant development. A camera, for example, only shows its detection area. An automatic visitor count delivers values within its technical limits.
If visitors move from a monitored area into an area that is not covered, the crowd density measured there can drop while a critical concentration builds up elsewhere.
The data is correct – the overall assessment derived from it can still be wrong. In addition, there are different update times, gaps in coverage and possible misinterpretations by automated analyses.
Three factors for a reliable assessment
Three factors are therefore decisive for a reliable security assessment:
- Availability: Do the systems in use work?
- Data quality: Is the information up to date, sufficiently complete and reliable? [2]
- Situation assessment: Does the available information actually support the conclusions drawn? [1] [3]
A real-time operational picture must therefore not only present information but also make its limits recognisable.
Conclusion
The quality of a digital operational picture is not measured by how many systems are connected, but by whether the available information enables an accurate and timely security decision.
Professional notes
Video analysis and visitor data may only be processed within the applicable data protection rules, for example the GDPR. This article is general guidance and does not promise functions of any particular system.
Read more: Situational awareness at events: more than a video wall, Situational information during an operation: planning recipients and access Counting visitors with cameras: the current number on site and A security plan can become invalid without the total visitor number being exceeded.
Context: research as of 7 November 2026. Sources taken over with title and edition only, not checked against the original texts. ISO 22320 is a guideline; NIST SP 800-150 covers the sharing of cyber threat information and does not support the statements on operational pictures at events. The example is kept general. General guidance, not legal advice.
Sources
- ISO 22320:2018: Emergency management – Guidelines for incident management. Guidance on managing incidents, including information and decision support.
- ISO/IEC 25012:2008: data quality model for data in structured systems.
- NIST SP 800-150: Guide to Cyber Threat Information Sharing. Background on assessing the quality of shared information; it covers the sharing of cyber threat information, not operational pictures at events.
Expertise
All articlesRead on
Events, companies or critical infrastructure: we will show you how MOVETOS OPS does this in practice.