Cyber Risk & Resilience: Learning from Commercial Incident Management

Cybersecurity is a key source of concern for highly-connected hypermodern economies and societies. The scope and scale of threats to information technological infrastructures is growing and is challenging governments, business and civil society to develop effective responses and modes of preventive action. In the commercial sector, risk management and resilience are emerging as primary resources for firms to recognise, prepare and respond to a multi-dimensional cyber risk landscape. This project draws upon a unique set of cyber incident data collated by a leading legal firm (Norton Rose Fulbright) to shed light on the types of cyber incidents perpetrated against a diverse client base and on the range of legal, regulatory, business and law enforcement responses available in this dynamic environment. It will allow us to characterise better the nature of cyber risk in the commercial sector, to discern and evaluate the efficacy and practicality of responses to cyber risk, and to clarify the relations between actor types in the dynamic field of cybersecurity policy and practice. The project will constitute an empirically rich and theoretically sophisticated contribution to an under-explored aspect of cybersecurity, with particular attention to the growing importance of risk and resilience in today's economy and society.

The student will benefit greatly from immersion in the work of a leading law firm and its activities in cyber risk and resilience. The partner institution will provide office space and equipment to the researcher at its headquarters in central London, enabling high-level access to the firm's unique cyber incident database. It will provide all necessary skills training and support to enable the student to maximise their time at Norton Rose Fulbright and to contribute productively to the life of the firm. It will facilitate access to research participants in the UK and elsewhere and foster student interaction with end-users and other parties, including through industry events, specialist conferences and workshops. Norton Rose Fulbright will look to involve the student in all promotional / networking events relevant to their field of research. The partner will also promote the student's research within the firm and beyond, and help with internal and external dissemination opportunities, including the authorship of working papers, research briefs and other materials. Crucially, an experienced employee at the firm will mentor the student throughout the project, providing guidance and support, and being their primary point of contact.