Cyber Risk & Resilience: Learning from Commercial Incident Management

网络安全是高度互联的超现代经济和社会关注的一个关键问题。对信息技术基础设施的威胁的范围和规模正在增长，这对政府、企业和民间社会提出了挑战，要求他们制定有效的应对措施和预防行动模式。在商业领域，风险管理和弹性正在成为企业识别、准备和应对多维网络风险格局的主要资源。该项目利用由一家领先的律师事务所（Norton Rose Fulbright）整理的一套独特的网络事件数据，阐明针对不同客户群的网络事件类型，以及在这个动态环境中可用的法律、监管、商业和执法应对措施的范围。它将使我们能够更好地描述商业部门网络风险的性质，辨别和评估应对网络风险的有效性和实用性，并澄清网络安全政策和实践动态领域中行为者类型之间的关系。该项目将为网络安全的一个未被充分探索的方面做出丰富的经验和理论复杂的贡献，特别关注当今经济和社会中风险和弹性日益增长的重要性。学生将从沉浸在一家领先律师事务所的工作及其在网络风险和弹性方面的活动中受益匪浅。合作机构将在其位于伦敦市中心的总部为研究人员提供办公空间和设备，使其能够高级访问该公司独特的网络事件数据库。它将提供所有必要的技能培训和支持，使学生能够最大限度地利用他们在诺顿罗斯富布赖特的时间，并为公司的生活做出富有成效的贡献。它将促进英国和其他地方的研究参与者的访问，并促进学生与最终用户和其他各方的互动，包括通过行业活动，专家会议和研讨会。诺顿罗斯富布赖特学院将邀请学生参加与他们的研究领域相关的所有推广/网络活动。合作伙伴还将促进学生在公司内外的研究，并帮助提供内部和外部传播机会，包括撰写工作论文、研究简报和其他材料。最重要的是，公司有经验的员工将在整个项目中指导学生，提供指导和支持，并成为他们的主要联系人。

Cybersecurity is a key source of concern for highly-connected hypermodern economies and societies. The scope and scale of threats to information technological infrastructures is growing and is challenging governments, business and civil society to develop effective responses and modes of preventive action. In the commercial sector, risk management and resilience are emerging as primary resources for firms to recognise, prepare and respond to a multi-dimensional cyber risk landscape. This project draws upon a unique set of cyber incident data collated by a leading legal firm (Norton Rose Fulbright) to shed light on the types of cyber incidents perpetrated against a diverse client base and on the range of legal, regulatory, business and law enforcement responses available in this dynamic environment. It will allow us to characterise better the nature of cyber risk in the commercial sector, to discern and evaluate the efficacy and practicality of responses to cyber risk, and to clarify the relations between actor types in the dynamic field of cybersecurity policy and practice. The project will constitute an empirically rich and theoretically sophisticated contribution to an under-explored aspect of cybersecurity, with particular attention to the growing importance of risk and resilience in today's economy and society.The student will benefit greatly from immersion in the work of a leading law firm and its activities in cyber risk and resilience. The partner institution will provide office space and equipment to the researcher at its headquarters in central London, enabling high-level access to the firm's unique cyber incident database. It will provide all necessary skills training and support to enable the student to maximise their time at Norton Rose Fulbright and to contribute productively to the life of the firm. It will facilitate access to research participants in the UK and elsewhere and foster student interaction with end-users and other parties, including through industry events, specialist conferences and workshops. Norton Rose Fulbright will look to involve the student in all promotional / networking events relevant to their field of research. The partner will also promote the student's research within the firm and beyond, and help with internal and external dissemination opportunities, including the authorship of working papers, research briefs and other materials. Crucially, an experienced employee at the firm will mentor the student throughout the project, providing guidance and support, and being their primary point of contact.