**1. Introduction**

Cyber situational awareness (CSA) studies are accompanied by planning strategies and the implementation of protection measures. These studies are not limited to searching for vulnerabilities, cyber threats in the cyber environment, tracking incidents or anomalies. Such studies include the activities of an analyst with a large amount of data, their analysis and the preparatory stages for decision making. This article describes methods and developed software tools to support decision making in the analysis of the CSA of energy facilities, although the classical model of cyber situational awareness presented by Mica Endsley [1] does not include the decision-making process.
