10157163Cyber-R: Securing Businesses through Generative AI-based Adaptive Cyber Resilience ServiceClosedCollaborative R&DInnovate UKAccording to the UK Cyber Security Breaches Survey 2024, UK businesses faced approximately 7.78 million cybercrimes over the past year, with phishing attacks accounting for 84% of these incidents. Additionally, 50% of businesses experienced cyberattacks, with medium and large enterprises facing over 70% more attacks due to their larger attack surfaces, more valuable data, and increased visibility. These attacks have severe consequences for businesses by affecting financial stability, business continuity, reputation, trust, and overall growth. As cyber threats become more frequent and complex, businesses struggle to keep up with evolving risks. This makes cyber resilience a critical priority for safeguarding operations and data. At the same time, the Cyber Security Skills in the UK Labour Market 2024 report highlights a shortage in cybersecurity skills. According to the report, 44% of businesses lack basic technical cybersecurity skills, and the gap in incident management skills has risen from 27% in 2020 to 48% in 2024\. This shortage of expertise leaves businesses increasingly vulnerable, as they lack the capability to effectively assess risks, implement mitigation strategies, and respond to cyber incidents. The scale and impact of these cyberattacks, together with the growing skills gap, emphasise the urgent need for automated, customisable, and cost-effective solutions to enhance cyber resilience across UK businesses. Existing cyber resilience solutions often fail to meet the rapidly changing and complex needs of modern businesses. Traditional approaches rely on static, one-size-fits-all templates and manual interventions, failing to address an organisation's unique digital infrastructure and specific risks. Solutions such as vulnerability scanning, SIEM, and basic AI-driven analytics are commonly used but often require significant manual oversight and provide limited customisation. Businesses need a solution that not only automates risk and vulnerability assessments but also delivers ready-to-implement, tailored cyber resilience plans for their specific operational environments. To address these challenges, our proposed Cyber-R offers an innovative, automated, and customisable cyber resilience service for businesses. Cyber-R integrates Digital Twin and Generative AI technologies to automatically generate tailored, ready-to-implement cyber resilience plans based on a business's specific digital infrastructure. By automating vulnerability and risk assessments, Cyber-R provides businesses of all sizes with a cost-effective and scalable service that complies with regulations to proactively manage cybersecurity risks. Aligned with CyberASAP, Cyber-R equips businesses with an advanced AI-powered cybersecurity service designed to strengthen their resilience, minimise manual effort, and optimise the cyber risk management process.