Analysing Trends in International Cybersecurity Capacity Building Initiatives

国际社会正在进行大量投资，旨在帮助各国和地区发展其网络安全能力。牛津马丁学院全球网络安全能力中心GCSCC的工作对此进行了研究和记录。GCSCC的一项关键成果是全球网络专门知识论坛(GFCE)清单，该清单为目前世界各地网络安全关键领域的国际和区域能力建设努力提供了一个中心参照点。GCSCC的核心组成部分是网络安全能力成熟度模型，该模型通过网络安全能力的五个不同维度对一个国家的网络安全能力进行基准。这一研究项目有两个目标；第一，分析网络安全能力建设的区域趋势、工作性质和为此提供支持的现有伙伴关系。对这些举措的分析将以网络安全能力成熟度模型(CMM)为指导，旨在找出能力建设资金方面的差距，并将这些资金错误地分配到不太重要的因素中。第二个也是主要的目标是在对少数网络安全倡议进行严格分析的基础上，提出成功的网络安全倡议的原则。要解决的研究问题是：从当前的网络能力建设活动中吸取了什么教训，这些倡议的哪些方面对其成功至关重要？重点将放在GCSCC模式的特定区域和特定成熟度方面。这些将在对能力建设活动进行初步分析后确定。这项研究属于EPSRC网络安全主题

There is a large investment being made by the international community aimed at helping nations and regions to develop their capacity in cybersecurity. The work of the Oxford Martin School's Global Cyber Security Capacity Centre GCSCC studies and documents this. One key output of the GCSCC is the Global Forum on Cyber Expertise (GFCE) Inventory which provides a central point of reference for current international and regional capacity building efforts around the world in the key areas of cybersecurity. https://www.sbs.ox.ac.uk/cybersecurity-capacity/explore/gfceAnother core component of the GCSCC is the Cyber Security Capacity Maturity Model (CMM) which benchmarks a country's cybersecurity capacity across five distinct dimensions of cybersecurity capacityThis research project has twofold objectives; firstly to analyse regional trends in capacity building in cybersecurity, the nature of the work and the partnerships that exist to support it. That analysis of the initiatives will be guided by the Cyber Security Capacity Maturity Model (CMM), aiming at identifying gaps in the funding of capacity building and misallocation of these funds in less important factors. The second and main objective is to provide the principles for successful cybersecurity initiatives based on a rigorous analysis of a small number of them.The research question to be addressed is "What are the lessons learnt from the current cyber capacity building activities and what aspects of these initiatives are crucial for their success?" The focus will be on a specific region and on a specific maturity dimension of the GCSCC model. These will be determined after the initial analysis of the capacity building activities.This research comes under the EPSRC Cyber Security theme