Abstract: Cognitive warfare targets perception and decision-making, yet officer training lacks the operational constructs that structure kinetic or cyber operations. This doctrinal gap leads to fragmented detection, weak attribution, and curricula that prioritise procedural certainty over adaptive judgment in the face of ambiguity. This article introduces the Cognitive Defence Cycle (CDC), an operational model mapping cognitive attack phases—reconnaissance, weaponisation, delivery, exploitation, action on objective—to measurable indicators and simulation-based training interventions. Drawing on constructivist epistemology, the CDC reframes ambiguity as exploitable terrain rather than detection failure.

Problem statement: How can military education institutions systematically develop cognitive resilience in officers when current training architectures assume conditions no longer guaranteed in modern conflict?

So what?: Training commands must integrate the CDC into officer education curricula, shifting from media-literacy lectures to adversarial simulation environments. This requires three institutional changes: establishing measurable cognitive defence metrics analogous to cyber indicators of compromise; redesigning capstone exercises to include cognitive attack scenarios with controlled, manipulated realities; and developing instructor cadres trained in metacognitive debrief methodologies.

„Our knowledge can only be finite, while our ignorance is necessarily infinite.”

(Karl R. Popper)

The Cognitive Turning Point in Officers´ Training

With the rapid development of technology, particularly in information and communication technologies, automation, and artificial intelligence (AI), warfare has reached a new level. Cognitive warfare targets perception, interpretation, and decision-making, the cognitive dimension of command. Cognitive warfare, especially supported by AI and algorithms, utilises manipulated information within the Information Environment (IE) to influence perception and decision-making processes entirely in the enemy´s interest.[1] The insidious aspect is that, by exploiting cognitive biases, this manipulation is not obvious, as over 80% of decisions are made unconsciously.[2]

Decisions based on this manipulated information favour the opponent. The cognitive dimension lacks an operational model to counter cognitive warfare. This absence results in fragmented detection, weak attribution under plausible deniability, and training that fosters procedural certainty rather than adaptive judgment in ambiguous contexts. It is therefore necessary to base decisions on epistemological critique rather than on procedural adherence alone. Critical control questions are needed to question the validity of information and one´s own perception.

Understanding Military Education and Operations

Military education systems excel at training decision-making under uncertainty–incomplete intelligence, “fog of war”, time pressure. Staff colleges teach structured frameworks: commander’s estimate, Military Decision-Making Process, operational planning. These procedures assume information is scarce but reliable. They also assume that information is not deliberately shaped, constructed or manipulated by adversarial actors. They fail when information abundance is used to mask deliberate manipulation. The failure is structural.

Officers typically learn to trust their situational awareness once it is developed through established procedures. When adversaries attack the construction process–manipulating information flows, exploiting cognitive biases–procedurally correct officers become predictably vulnerable. Most Western command-and-control cultures rest on an implicit realist epistemology: reality is assumed to be external, stable, and discoverable through improved intelligence, faster fusion, or superior sensors. Cognitive warfare targets precisely this assumption. Rather than contesting facts directly, adversaries interfere with the processes through which information becomes meaningful, credible, and decision-relevant–what organisational theorists call “sensemaking.“[3]

Constructivist epistemology, typically confined to international relations theory or organisational studies, offers direct operational utility for cognitive defence. If decision-makers never access reality directly but always through constructed representations, then adversaries need not falsify facts; they need only manipulate frames. This insight transforms cognitive warfare from a “disinformation problem“ (correctable through better facts) to a “sensemaking problem“ (requiring metacognitive resilience).[4]

The 2014 annexation of Crimea illustrates how epistemological assumptions about attribution and legitimacy can be operationalised in contested environments. Armed personnel in unmarked uniforms seized Simferopol airport and regional parliamentary facilities on 27 February 2014. NATO and allied intelligence services are widely assessed to have had early attributional awareness of Russian involvement, yet the translation of such assessments into coordinated political articulation and collective response followed institutional procedures involving intelligence fusion, legal review, and political consultation.

The analytical distinction is therefore not between knowledge and ignorance, but between intelligence assessment, public attribution, and operational tempo. While attribution was progressively formalised, Russian forces secured key infrastructure within a significantly shorter operational timeframe.  Russian operational planning is assessed as having leveraged temporal asymmetries between political decision-making and operational consolidation. Multinational consensus formation typically unfolds over days, whereas territorial consolidation operates on significantly shorter timeframes measured in hours. In this context, attributional ambiguity didn‘t inhibit operational sequencing; instead, it created a temporal window in which consolidation could proceed ahead of a coordinated response.

Constructivism as an Operational Lens

From a constructivist perspective, the decisive contest was not limited to identifying the actors involved, but extended to the construction and normalisation of a particular reality through their presence. The shift is thus not only from physical control to interpretive dominance, but from terrain to meaning.[5] In conventional kinetic warfare, constructed realities are subject to continuous correction through physical feedback. In cognitive operations, by contrast, constraints on verification may be deliberately weakened or delayed, enabling constructed realities to consolidate before verification catches up, and they can be effectively challenged.

The implication for officer education is direct. Without explicit epistemological training, officers remain structurally vulnerable to manipulation that operates below the threshold of traditional indicators and warnings. This vulnerability extends beyond individual decision-making to institutional and societal levels, where collective beliefs shape political discourse, strategic culture, and the perceived boundaries of legitimate action.[6]

Critics dismiss constructivism as relativism incompatible with military command, which requires objective assessment. Critics confuse epistemology with ethics. Constructivism makes no claim about moral equivalence. It claims human cognition never accesses reality directly but always through interpretive frameworks shaped by experience, culture, and context.[7]

Decision science confirms this empirically. Klein’s fireground commanders satisfice through pattern recognition rather than exhaustive analysis.[8] Kahneman demonstrates that risk assessment varies systematically based on problem framing.[9] John Boyd’s Observe-Orient-Decide-Act ( OODA) loop identifies orientation as the decisive phase, as observation is mediated through constructed interpretive frames.[10] Klein, Kahneman, and Boyd independently concluded: effective command depends less on accessing “true“ reality than constructing operationally viable reality faster than adversaries disrupt it.

For officers, the implication is direct. When adversaries attack your sensemaking, demanding certainty before action guarantees defeat. Alternatively, accepting all situational awareness is constructed, focusing on constructing it well under adversarial conditions enables action with sufficient coherence rather than impossible certainty.

Constructivist approaches emphasise that situational awareness is shaped by underlying assumptions and interpretive frameworks. Making these assumptions explicit enables officers to reflect on and adjust their sensemaking processes while maintaining decisiveness.[11] In cognitive warfare, orientation becomes an early target of disruption, yet remains comparatively underdeveloped in command training. Neglecting this dimension leaves a critical vulnerability unaddressed.

The Cognitive Attack Lifecycle

Cyber defence operates with analytical clarity that cognitive defence lacks. Network intrusion analysts describe attacks through structured phases: reconnaissance, weaponisation, delivery, and exploitation. The Lockheed Martin Cyber Kill Chain provides a shared language enabling cross-organisational coordination.[12] Phases are defined, indicators are measurable, and interventions are phase-specific.

Cognitive operations lack equivalent structure. Analysts refer to “disinformation campaigns” or “influence operations” without phase-based precision. Such vagueness reflects framework absence, not inherent complexity. Without phase structure, detection remains ad hoc, attribution is delayed, and training is impossible to systematise. The Cognitive Attack Lifecycle (CAL) addresses this gap by providing cognitive operations with the analytical structure that cyber kill chains provide for network intrusions.

Cognitive operations lack the kill-chain logic that makes cyber and kinetic operations analyzable, trainable, and defensible. The NATO Strategic Communications Centre of Excellence (NATO  StratCom COE) identifies the cognitive dimension in its conceptual work but does not extend this into a phase-based operational structure.[13] The EU Centre of Excellence for Countering Hybrid Threats focuses on societal resilience but lacks models for the military-operational phase.[14] Adaptations of the OODA loop remain either too diffuse or too linear to capture how cognitive attacks unfold over time.[15]

The authors introduce the CAL, the first phase-based operational model for cognitive warfare that meets the analytical standards of cyber kill-chains while addressing the unique properties of cognitive operations. CAL does not compete with existing doctrine; it operationalises what doctrine currently describes only in abstract terms.

Phases of the Cognitive Attack Lifecycle

Three principles underpin CAL: cognitive operations unfold in discernible phases; detection relies on observable behavioural patterns rather than conclusive attribution; and each phase maps to distinct intervention points and training requirements.

Phase 1 – Reconnaissance (Cognitive Terrain Mapping): Adversaries map exploitable cognitive vulnerabilities, such as emotionally charged societal divisions. Which institutions face credibility deficits? Which narratives already circulate at margins? Operations increasingly leverage OSINT, social media analytics, and psychographic profiling.[16]

Phase 2 – Weaponisation: Reconnaissance data transforms into operational content through intelligence analysis in reverse—adversaries engineer information to produce specific meanings rather than extract them. Identified vulnerabilities map to narratives blending factual elements (credibility), emotional triggers (engagement), and strategic ambiguity (complicating counter-messaging).[17]

AI accelerates this phase. LLMs generate plausible narratives at scale; sentiment analysis optimises emotional resonance; A/B testing identifies effective framings. Frame construction, not fact falsification, drives this phase.[18] NATO expansion: the factual sequence (Warsaw Pact dissolution, Eastern European accessions, NATO-Russia Foundation Act) remains undisputed. Russian operations do not falsify this timeline—they frame it. “NATO encirclement“ versus “sovereign states choosing democratic institutions.“ Both frames describe identical events. The frame determines whether expansion is perceived as threatening or legitimate.

Phase 3 – Delivery (Distribution & Amplification): Coordinated cross-platform dissemination via social media, fringe outlets, influencers, and bots. Temporal synchronisation (<6h) distinguishes campaigns from organic virality.[19]

Phase 4 – Exploitation (Cognitive Triggering): Rapid amplification exploits triggering events (crises, elections, disasters). Narratives remain contestable—audiences have not internalised the content; fact-checking remains effective.[20] The “firehose of falsehood“ model overwhelms defences through volume, velocity, and multi-channel coordination.[21]

Phase 5 – Installation (Narrative Internalisation): Narratives internalise within identity-based communities, transforming beliefs into identity markers. Counter-information triggers defensive processing — corrections strengthen rather than weaken belief.[22]

Critical transition: During Exploitation, narratives remain contestable, and fact-checking remains effective. During Installation, beliefs become increasingly linked to identity as a result of repeated social reinforcement, algorithmic amplification and in-group validation, which embed claims within social belonging structures. couple with identity. Intervention strategies must therefore shift from correction to inoculation—exposing manipulation mechanisms rather than debunking specific claims.

Phase 6 – Action on Objective (Behavioural Effect): Observable behavioural or policy effects—decision hesitation, political polarisation, delayed responses, institutional paralysis.[23] Success does not require specific outcomes; imposing cognitive costs suffices in wars of attrition.[24]

Operationally consequential: countermeasures effective during Exploitation fail during Installation. Treating all cognitive effects as undifferentiated “disinformation“ obscures where intervention remains feasible.

Empirical Validation: CAL Applied to Documented Operations

Crimea 2014 illustrates a rapid Exploitation-to-Installation transition. While NATO coordinated attribution (weeks), Russian forces consolidated control (hours).[25] CAL reveals the temporal asymmetry: diplomatic consensus timelines cannot counter cognitive operation speeds.

COVID-19 Lab-Leak Narratives demonstrate multi-society Installation. State-sponsored outlets synchronised fringe speculation across platforms, timed with credibility gaps.[26] Fact-checking failed because interventions targeted Phase 6 outcomes while operations had succeeded in Phase 5 identity-coupling.

Russian 2016 U.S. Election Interference validates the need for extended reconnaissance. Operations began in 2014, mapping partisan divisions before weaponisation.[27] CAL demonstrates cognitive operations that sustain multi-year timelines with reconnaissance occurring long before visible delivery.

The People‘s Liberation Army PLA “Three Warfares“ concept (psychological warfare, media warfare, and legal warfare) represents a doctrinal articulation of coordinated influence activities that predates comparable Western discourse. While differing in institutional and strategic context, it exhibits a similar sequencing logic across cognitive, informational, and legal domains, suggesting a convergent rather than identical structural pattern across actor types.[28]

These cases spanning 2014-2021 across European, American, and Indo-Pacific theatres demonstrate CAL’s empirical validity and analytical utility.

Observable Indicators and Training Implications

Each CAL phase generates measurable behavioural signatures enabling systematic monitoring:

• Exploitation Phase: Cross-platform synchronization (<6h), sentiment velocity (>3 SD above baseline), amplification anomalies (bot-to-organic >2:1), temporal clustering (hashtag correlation >0.7);[29]
• Installation Phase: Echo chamber formation (in-group/out-group divergence >60%), correction rejection, identity coupling (narrative defence = identity defence);[30]
• Action Phase: Decision latency (>2× baseline), alliance coherence breakdown, resource misallocation, institutional paralysis.[31]

Training shifts from falsehood identification to operational pattern recognition: Which phase are we in, and what does that phase require? Officers develop cognitive terrain sensitivity—noticing when attack preparation occurs regardless of specific techniques employed.[32]

The Cognitive Defence Cycle (CDC)

The Cognitive Defence Cycle operationalises the understanding of cognitive warfare. Analysis alone changes nothing without institutional capacity to act on analytical insight. CDC provides that capacity by translating phase-based threat understanding into a cyclical defence architecture.

The architectural innovation is decoupling. Traditional command systems create dependencies: detection triggers investigation, investigation enables attribution, and attribution authorises response. Each dependency introduces a delay.[33] CDC eliminates dependencies by enabling effect-based responses that are independent of attribution confidence, while simultaneously pursuing attribution for strategic purposes. Tactical disruption operates on 60-70% confidence; strategic responses require 85%+ confidence.[34]

CDC Components and Information Flows

Automated monitoring in the Sensor Layer detects anomalies, synchronised activity patterns, sentiment spikes and amplification signals. When predefined thresholds are reached, alerts are escalated to the Sense-Making Layer. In this layer, analysts integrate multi-source intelligence to evaluate competing hypotheses, often supported by structured red-teaming to surface alternative explanations. Outputs consist of probabilistic assessments with explicit confidence levels, enabling differentiated downstream responses.[35]  In the Decision Layer, commanders assess options amid uncertainty using established decision heuristics. Authorisation for action is routed to the Response Layer based on assessed effects, phase classification within the CAL framework, and confidence thresholds rather than complete attribution certainty. The Response Layer implements phase-dependent mechanisms, ranging from narrative disruption during exploitation to resilience-building during installation and strategic adaptation during active phases, while feeding observed outcomes back into the Sensor Layer for continuous monitoring.

The Learning Layer consolidates post-operation analysis, extracts recurring patterns, updates threat signatures, and integrates lessons learned into training and doctrinal injects, thereby enabling iterative system improvement through operational feedback.[36]

Decision Heuristics Under Cognitive Attack

Traditional command culture assumes that assessment achieves sufficient confidence before a decision. Cognitive warfare inverts this: waiting for confidence is often the defeat mechanism. Officers require heuristics enabling proportionate action under persistent uncertainty.

Five heuristics derived from decision theory provide practical guidance:

Response decisions may be decoupled from full attribution when observable effects are harmful, and intervention remains reversible. Effect-based response decoupling refers to the separation of response decisions from full attribution, allowing intervention when observable effects are harmful and intervention is reversible. In such cases, tactical disruption may proceed at moderate confidence levels (60–70%), while strategic responses require higher thresholds (85%+), reflecting differing risk exposure and decision cost asymmetries in uncertain environments.[37], [38]

.Intervention design is structured according to phase within the CAL framework. During exploitation, narratives remain contestable and are addressed through fact-checking. During installation, narratives increasingly resist correction as they become embedded in identity structures, shifting intervention toward inoculation approaches targeting underlying mechanisms rather than content-level claims.[39]

Cross-platform synchronisation within narrow temporal windows is treated as an indicator of coordination absent credible alternative explanations. Mechanism-focused interventions are prioritised over repeated content-level debunking due to higher cross-narrative generalisability and durability of effects.[40]

Uncertainty is communicated through calibrated confidence expressions within operational constraints, as differentiated signalling supports institutional credibility when actors distinguish between acknowledged uncertainty and analytical incompetence.[41]

These heuristics reduce paralysis without abandoning democratic norms or accountability.

Ambiguity as Strategic Terrain

Authoritarian strategists investing in cognitive operations make a calculated wager: democratic command systems will delay responses until attribution certainty is established, and multinational institutions will delay further action until consensus is reached. This wager reflects an accurate observation of the Cold War, in which plausible deniability consistently paralysed the West.[42]

Russian and Chinese operational planning assumes this pattern persists. Massive investments in attribution evasion, operational security, layered cutouts, and cover narratives reflect the expectation that obscuring origin protects operations. If adversaries believe ambiguity ensures impunity and structure operations accordingly, reversing this belief becomes a strategic opportunity.

The reversal requires shifting from deterrence by punishment (which requires attribution) to deterrence by denial (which requires only recognition of effect). If operations fail to consolidate narratives because defenders disrupt them based on effects rather than waiting for attribution, adversarial investment in origin-obscuring produces diminishing returns.[43]

This constitutes deterrence by denial in cognitive space. Just as missile defence denies strike utility without requiring attribution of launch origin, cognitive defence denies narrative consolidation without requiring attribution of narrative origin.[44]

From Fragile Certainty to Antifragile Ambiguity

Officer education faces a strategic choice. Fragile certainty, waiting for verification, demanding attribution, optimises for peacetime norms but fails catastrophically under cognitive attack. Antifragile ambiguity tolerance–acting on effects, learning from outcomes–accepts uncertainty as permanent and develops capabilities optimised for that reality.[45]

This is not recklessness but calibrated action: responses proportionate to confidence levels, reversible when possible, documented for accountability, and bounded by legal and ethical constraints. Officers learn to distinguish between uncertainty that justifies caution and uncertainty that justifies action. Different response types require different confidence thresholds; tactical disruption requires lower thresholds than strategic responses.[46]

The strategic stakes are clear. Forces that master ambiguity tolerance gain a decisive advantage in environments where adversaries deliberately create ambiguity. Forces that cling to certainty requirements remain vulnerable to adversaries who understand that epistemological exploitation succeeds where technological exploitation fails.

Current Doctrinal Landscape and Critical Gaps

NATO’s cognitive warfare concept remains fragmented. StratCom COE, Hybrid CoE, and Allied Command Transformation address cognitive dimensions, yet no unified doctrine integrates these efforts.[47] The EU’s cognitive security framework focuses on information integrity and platform regulation–necessary but insufficient for military operational requirements.[48]

Critical gaps include: no standardised cognitive threat assessment methodology; no integration of cognitive indicators into intelligence fusion architectures; no training standards for cognitive resilience across member states; no agreed success metrics for cognitive defence.[49]

The CAL and CDC frameworks offer starting points for addressing these gaps by providing a phase-based analytical structure and an institutional response architecture. However, frameworks alone do not create doctrine. Translation from academic proposal to military standard requires senior leader commitment, institutional implementation, multinational coordination, and academic-practitioner integration.[50]

Didactic Implementation

Ultimately, officers must be capable of both verifying the validity of information and making decisions in uncertain situations. This leading in “Clausewitzian fog of war” has always been part of leadership training. The challenge now is to link these two requirements in a structured manner.

The authors intend to focus on key statements and merely provide a guideline. A more detailed explanation will be necessary before implementation within the framework of officers´ training. At this point, reference is made to the explanations by Schulyok and Zeman, who address the implementation of countering cognitive warfare in training in their article, “Bias Vs Bots: Training Officers For Cognitive Warfare”.[51]

To navigate this tension between uncertainty and the desired validity of available information while still making sound decisions requires epistemic resilience. Epistemic resilience is the capacity of individuals or systems to maintain clear thinking and make sound judgments in the face of complex, misleading information or profound uncertainty. It enables one to maintain mental flexibility, learn faster, and cope despite information overload, while remaining capable of acting.[52] Seen from an individual level, it is the ability to critically evaluate information, remain open to revising beliefs in light of new evidence, and maintain cognitive effectiveness despite “information saturation” or deceptive narratives.

The following key aspects help to identify and avoid cognitive biases and lead to epistemic resilience:[53]

Attribute	Training Method
Critical thinking	Practice assessing the validity of information and evaluating credibility through structured analysis exercises.
Analytical skills	Regularly analyse information for biases, accuracy, and reliability before accepting it (e.g., fact-checking tasks, source comparison).
Learning from mistakes (failure culture)	Reflect on errors as part of the learning process; use feedback loops and quick recovery strategies to improve thinking.
Openness	Engage with diverse perspectives, actively consider the possibility of being wrong, and practice revising one’s opinions when necessary.
Awareness of cognitive limits	Train metacognition by recognising limits of one’s own knowledge and deliberately seeking challenging viewpoints.
Self-awareness (perception influenced by state)	Develop mindfulness and reflection habits to understand how emotions and physical state affect thinking.
Adaptability	Practice updating beliefs with new information and making decisions flexibly rather than defensively.

Epistemic resilience is closely linked to cognitive resilience; together, they contribute to stability amid volatility.

Cognitive resilience is the brain´s ability to demonstrate mental flexibility and adapt to challenges, stress, and crises by changing thought patterns, finding new solutions, and maintaining cognitive function despite adverse circumstances.

Cognitive resilience can be achieved by training the following aspects:

• Cognitive flexibility is the ability to break free from rigid thought patterns and adapt flexibly to new situations by developing alternative perspectives and solutions;
• Focusing on problem analysis and resource activation in the search for possible solutions, including alternatives, is crucial, not static problem-fixation; and
• Consciously re-evaluating a situation (reframing) by looking for positive aspects or changing perspective, thus approaching problem-solving analysis from a different angle.

Didactic Steps

Conveying basic knowledge of Cognitive Warfare and its methods and tools is a prerequisite for understanding how humans think and make decisions, and are subject to various influences.

The next step is to explore the methods available to counteract these influences. From the military officers’ perspective, they play a key role in this context. They are the ones who have to make decisions, but are also part of this environment, surrounded by colleagues and subordinates who are themselves both probably influenced and influencing the officers; it´s like a pivotal intermediary role. In this case, officers must act as role models and actively influence their environment through education in order to ultimately achieve social-epistemic resilience.

Initially, basic instruction serves to impart fundamental knowledge. Subsequently, the insights gained are deepened through wargames using scenarios and simulations. AI-Interactive learning situations in laboratory-like learning environments support this process. Each training sequence must conclude with a guided self-reflection session that outlines the insights and conclusions gained. The transfer of knowledge to everyday military and societal life must be established.

Particular attention should be paid to reflection loops within the decision-making process on the path to the decision, initially step-by-step under guidance, and in the consolidation phase after the decision-making process in the format of supervision. Special attention should be paid to the justifications for the individual steps to make the thought processes and decision-making pathways visible and comprehensible to all involved. The search must focus on cognitive biases and other internal and external influences.

As a useful tool, the SIFT testing technique has proven effective as a 4-step method:[54]

• Stop: Pause briefly.
• Investigate the source: Who is behind it? Who are the authors?
• Find better coverage: Search for two different independent counter-sources.
• Trace to Origin: Find the original source. What was the ident?

The SIFT method is a helpful tool at the CDC to move from the “Sensor Layer” (awareness) to the “Sense-Making Layer” (questioning coherence, meaning, origin).

The following questions could also help in the search for the validity and usefulness of information:

• Who benefits if this information is taken as true (Cui bono?)
• What speaks against its truthfulness?
• What other explanation also fits the information?

Consequently, the application of the Cognitive Defence Cycle (CDC) as a structured response to the Cognitive Attack Lifecycle (CAL) is to be implemented as a fixed component of continuous application and consolidation across all areas of leadership training. Furthermore, the foundations taught are to be applied in other lectures that require an understanding of pathways to decisions and actions, such as political education and military history.

Pedagogically, the CDC enables simulation-based training through controlled injection of manipulated realities: deepfakes, synthetic narratives, and AI hallucinations. Metacognitive debriefs cultivate decision-making under uncertainty competence, transforming officers from passive consumers of information into active validators of constructed reality. Unlike traditional media literacy programs, CDC training operationalises cognitive resilience.

Strategically, the CDC provides democratic militaries with an asymmetric advantage. Authoritarian adversaries exploit opacity and deniability; democratic forces can weaponise transparency and institutionalise tolerance for ambiguity. By establishing measurable cognitive defence metrics analogous to cyber indicators of compromise, the CDC closes the doctrinal gap between kinetic, cyber, and the cognitive dimension.

The acquisition of cognitive and epistemic resilience is therefore a core competency of military leaders in the 21^st century.

Way Ahead – From Epistemological Inertia to Cognitive Agility

Cognitive warfare succeeds not through technological sophistication but through epistemological exploitation. Adversaries target the unexamined assumption that reality, once sufficiently observed, becomes knowable and actionable. This assumption creates systematic vulnerabilities that cognitive operations deliberately exploit.

The CAL and CDC frameworks address this vulnerability at its source. CAL provides a phase-based analytical structure that cognitive operations currently lack—enabling systematic detection, assessment, and integration of training. CDC translates analytical clarity into institutional action by decoupling detection, attribution, and response—preventing attribution bottlenecks from creating tactical paralysis.

Together, these frameworks enable a fundamental shift: from treating ambiguity as an operational failure to treating it as permanent terrain that requires adaptive cognition. Officers trained in this paradigm become operationally harder to deceive, strategically harder to paralyse, and institutionally capable of learning under adversarial conditions.

Without curricular reform, emerging technologies like AI tutors, adaptive simulations, and OSINT tools may increase cognitive fragility rather than resilience. Integrating the CDC into training doctrine can turn epistemic vulnerability into an operational advantage. It is therefore necessary that the topic of cognitive warfare and possible solutions, such as the CAL and CDC frameworks, be implemented in officers´ training. This applies particularly to the leadership and decision-making training curricula. The decisive advantage in cognitive warfare belongs not to forces with superior sensors, but to forces with superior sensemaking – the capacity to construct operationally viable reality faster than adversaries can disrupt it. This capacity is trainable, measurable, and doctrine-compatible. What remains is the institutional will to implement it.

---

[1] Note: This article introduces the Cognitive Attack Lifecycle (CAL) and Cognitive Defence Cycle (CDC) frameworks as a conceptual foundation for a broader research program. A detailed operational implementation for German-speaking military contexts, including F2T2EA integration and probabilistic attribution mechanisms, is developed in Markus Gruber, “Operationaler Rahmen für Kognitive Kriegsführung: Von F2T2EA zur kognitiven Dimension,” Österreichische Militärische Zeitschrift (forthcoming 2026).

[2] Elisabeth Wehling, Politisches Framing: Wie eine Nation sich ihr Denken einredet – und daraus Politik macht (Berlin: Verlag Ullstein, 2021), 48.

[3] Karl E. Weick, Sensemaking in Organizations (Thousand Oaks, CA: Sage Publications, 1995).

[4] Ernst von Glasersfeld, Radical Constructivism: A Way of Knowing and Learning (London: Routledge, 1995).

[5] Janne Haaland Matlary, “The Legitimacy of Military Power in a Globalizing World,” in Denationalisation of Defence: Convergence and Diversity, ed. Janne Haaland Matlary and Øyvind Østerud (Aldershot: Ashgate Publishing, 2007), 45–68.

[6] Peter L. Berger and Thomas Luckmann, The Social Construction of Reality: A Treatise in the Sociology of Knowledge (Garden City, NY: Anchor Books, 1966).

[7] Paul Watzlawick, “Self-Fulfilling Prophecies,” in The Invented Reality: How Do We Know What We Believe We Know?, ed. Paul Watzlawick (New York: W. W. Norton, 1984), 95–116.

[8] Gary Klein, Sources of Power: How People Make Decisions (Cambridge, MA: MIT Press, 1998).

[9] Daniel Kahneman and Amos Tversky, “Prospect Theory: An Analysis of Decision under Risk,” Econometrica 47, no. 2 (1979): 263–91.

[10] John R. Boyd, “Patterns of Conflict,” in A Discourse on Winning and Losing, unpublished briefing materials (Maxwell Air Force Base, AL: Air University Library, 1987), https://www.coljohnboyd.com/static/documents/2018-03__Boyd_John_R__edited_Hammond_Grant_T__A_Discourse_on_Winning_and_Losing.pdf#resources.

[11] John H. Flavell, “Metacognition and Cognitive Monitoring: A New Area of Cognitive-Developmental Inquiry,” American Psychologist 34, no. 10 (1979): 906–11.

[12] Eric M. Hutchins, Michael J. Cloppert, and Rohan M. Amin, “Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains,” Proceedings of the 6th International Conference on Information Warfare and Security (2011): 113–25, https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/LM-White-Paper-Intel-Driven-Defense.pdf.

[13] Alonso Bernal et al., Cognitive Warfare: An Attack on Truth and Thought (Riga: NATO Strategic Communications Centre of Excellence, 2020), https://innovationhub-act.org/wp-content/uploads/2023/12/Cognitive-Warfare.pdf.

[14] Patrick J. Cullen and Erik Reichborn-Kjennerud, Understanding Hybrid Warfare, Multinational Capability Development Campaign Project (Helsinki: European Centre of Excellence for Countering Hybrid Threats, 2017), https://www.hybridcoe.fi.

[15] Dorothy E. Denning, “Cyberwarriors,” Harvard International Review 23, no. 2 (2000): 70–75.

[16] Todd C. Helmus et al., Russian Social Media Influence: Understanding Russian Propaganda in Eastern Europe (Santa Monica, CA: RAND Corporation, 2018), https://www.rand.org/pubs/research_reports/RR2237.html.

[17] Josh A. Goldstein et al., “How Persuasive Is AI-Generated Propaganda?,” Public Opinion Quarterly 88, no. SI (2024): 1–22.

[18] Robert M. Entman, “Framing: Toward Clarification of a Fractured Paradigm,” Journal of Communication 43, no. 4 (1993): 51–58.

[19] Fabio Giglietto, Nicola Righetti, Luca Rossi, and Giada Marino, “It Takes a Village to Manipulate the Media: Coordinated Link Sharing Behavior during 2018 and 2019 Italian Elections,” Information, Communication & Society 23, no. 6 (2020): 867–91.

[20] Nathan Walter et al., “Fact-Checking: A Meta-Analysis of What Works and for Whom,” Political Communication 37, no. 3 (2020): 350–75.

[21] Christopher Paul and Miriam Matthews, The Russian “Firehose of Falsehood” Propaganda Model: Why It Might Work and Options to Counter It, RAND Perspective PE-198 (Santa Monica, CA: RAND Corporation, 2016), https://www.rand.org/pubs/perspectives/PE198.html.

[22] Brendan Nyhan and Jason Reifler, “When Corrections Fail: The Persistence of Political Misperceptions,” Political Behavior 32, no. 2 (2010): 303–30.

[23] Christopher A. Bail et al., “Exposure to Opposing Views on Social Media Can Increase Political Polarization,” Proceedings of the National Academy of Sciences 115, no. 37 (2018): 9216–21.

[24] Jon R. Lindsay and Erik Gartzke, eds., Cross-Domain Deterrence: Strategy in an Era of Complexity (Oxford: Oxford University Press, 2019).

[25] Mark Galeotti, Controlling Chaos: How Russia Manages Its Political War in Europe, European Council on Foreign Relations Policy Brief (London: ECFR, 2017).

[26] David A. Broniatowski et al., “Weaponized Health Communication: Twitter Bots and Russian Trolls Amplify the Vaccine Debate,” American Journal of Public Health 108, no. 10 (2018): 1378–84.

[27] United States Senate Select Committee on Intelligence, Report on Russian Active Measures Campaigns and Interference in the 2016 U.S. Election, Volume 2: Russia’s Use of Social Media with Additional Views, 116th Cong., 1st sess. (Washington, DC: U.S. Government Publishing Office, 2019).

[28] Dean Cheng, Winning Without Fighting: Chinese Legal Warfare, Heritage Foundation Backgrounder no. 2692 (Washington, DC: Heritage Foundation, 2012).

[29] Diogo Pacheco et al., “Uncovering Coordinated Networks on Social Media: Methods and Case Studies,” Proceedings of the International AAAI Conference on Web and Social Media 15 (2021): 455–66.

[30] Cass R. Sunstein, #Republic: Divided Democracy in the Age of Social Media (Princeton, NJ: Princeton University Press, 2017).

[31] Yaacov Y. I. Vertzberger, The World in Their Minds: Information Processing, Cognition, and Perception in Foreign Policy Decisionmaking (Stanford, CA: Stanford University Press, 1990).

[32] K. Anders Ericsson, Ralf T. Krampe, and Clemens Tesch-Römer, “The Role of Deliberate Practice in the Acquisition of Expert Performance,” Psychological Review 100, no. 3 (1993): 363–406.

[33] Erik Hollnagel, David D. Woods, and Nancy Leveson, eds., Resilience Engineering: Concepts and Precepts (Aldershot: Ashgate Publishing, 2006).

[34] Jeffrey A. Friedman and Richard Zeckhauser, “Assessing Uncertainty in Intelligence,” Intelligence and National Security 27, no. 6 (2012): 824–47.

[35] Philip E. Tetlock and Dan Gardner, Superforecasting: The Art and Science of Prediction (New York: Crown Publishers, 2015).

[36] Chris Argyris and Donald A. Schön, Organizational Learning: A Theory of Action Perspective (Reading, MA: Addison-Wesley, 1978).

[37] Thomas C. Schelling, Arms and Influence (New Haven, CT: Yale University Press, 1966).

[38] Robert Jervis, Perception and Misperception in International Politics (Princeton, NJ: Princeton University Press, 1976).

[39] Stephan Lewandowsky et al., “Misinformation and Its Correction: Continued Influence and Successful Debiasing,” Psychological Science in the Public Interest 13, no. 3 (2012): 106–31.

[40] Stephan Lewandowsky and John Cook, “The ‘Alice in Wonderland’ Mechanics of the Rejection of (Climate) Science,” Synthese 195, no. 12 (2018): 5415–36, https://www.climatechangecommunication.org/debunking-handbook-2020/.

[41] Anne Marthe van der Bles et al., “Communicating Uncertainty about Facts, Numbers and Science,” Royal Society Open Science 6, no. 5 (2019): 181870.

[42] Thomas Rid, Active Measures: The Secret History of Disinformation and Political Warfare (New York: Farrar, Straus and Giroux, 2020).

[43] Martin J. Osborne and Ariel Rubinstein, A Course in Game Theory (Cambridge, MA: MIT Press, 1994).

[44] Michael J. Mazarr, Understanding Deterrence, RAND Perspective PE-295 (Santa Monica, CA: RAND Corporation, 2018).

[45] Nassim Nicholas Taleb, Antifragile: Things That Gain from Disorder (New York: Random House, 2012).

[46] Sherman Kent, Strategic Intelligence for American World Policy (Princeton, NJ: Princeton University Press, 1964).

[47] NATO Strategic Communications Centre of Excellence, Countering Cognitive Warfare: Awareness and Resilience (Riga: NATO StratCom COE, 2022).

[48] European Commission, The Strengthened Code of Practice on Disinformation 2022 (Brussels: European Commission, 2022).

[49] Office of the Director of National Intelligence, Intelligence Community Directive 203: Analytic Standards (Washington, DC: ODNI, 2015).

[50] Stephen Peter Rosen, Winning the Next War: Innovation and the Modern Military (Ithaca, NY: Cornell University Press, 1991).

[51] [51] Bernhard Schulyok and Katharina-Franziska Zeman, “Bias Vs. Bots: Training Officers For Cognitive Warfare,” The Defence Horizon Journal.

[52] Sebastian Mauritz, “Epistemische Resilienz: Klar bleiben im Info-Sturm,” Resilienz Akademie, November 20, 2025, https://www.resilienz-akademie.com/resilienz-allgemein/epistemische-resilienz-klar-bleiben-im-info-sturm/ (accessed January 11, 2026).

[53] Ibid.

[54] Ibid.