Composite Threat Index

What it is

A single 0–100 score representing the overall security posture for the Baltic region. Computed from four weighted components.

Components

Component	Weight	Inputs
Security	40%	ADS-B volume anomaly, FIRMS fire detections, NOTAM activity
FIMI (Foreign Information Manipulation)	25%	Active campaigns, narrative tag count, fabrication alerts
Hybrid	20%	GPS jamming severity, signal volume z-score
Economic	15%	Energy price anomaly

Score interpretation

Range	Level	Public label
0–15	GREEN	Normal
15–35	YELLOW	Watch
35–65	ORANGE	Concern
65–100	RED	Critical

Computation

The CTI is recomputed every 2 hours by the compute-threat-index Dagu step. It aggregates the latest data from all collectors and writes to the threat_index_cache table.

Limitations

The score depends on all collectors running correctly — stale inputs produce misleading scores
Weighting is manually calibrated, not data-driven
A GREEN/Normal score with missing data sources is not the same as GREEN with full coverage