Policy, statistics and questions: Reflections on UK cyber security disclosures
Over the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by t...
Main Authors: | , |
---|---|
Format: | Journal article |
Published: |
Oxford University Press
2016
|
_version_ | 1826282288231481344 |
---|---|
author | Heitzenrater, C Simpson, A |
author_facet | Heitzenrater, C Simpson, A |
author_sort | Heitzenrater, C |
collection | OXFORD |
description | Over the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by the same department presents a unique opportunity for reasonably correlated data to be analysed against public policy. We describe some initial steps in undertaking such an analysis by performing standard economics calculations on this data. Through the examination of three key questions that are central to the relationship between these documents, economic implications of the existing policy are highlighted against the reported threats. Somewhat inevitably, the results echo the well worn ‘it depends’ answer to the question of cyber security expenditure need; nevertheless, in doing so, they do help indicate the dependencies. |
first_indexed | 2024-03-07T00:41:34Z |
format | Journal article |
id | oxford-uuid:8337f7ff-4810-488f-8f02-d14050ce281f |
institution | University of Oxford |
last_indexed | 2024-03-07T00:41:34Z |
publishDate | 2016 |
publisher | Oxford University Press |
record_format | dspace |
spelling | oxford-uuid:8337f7ff-4810-488f-8f02-d14050ce281f2022-03-26T21:42:48ZPolicy, statistics and questions: Reflections on UK cyber security disclosures Journal articlehttp://purl.org/coar/resource_type/c_dcae04bcuuid:8337f7ff-4810-488f-8f02-d14050ce281fSymplectic Elements at OxfordOxford University Press2016Heitzenrater, CSimpson, AOver the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by the same department presents a unique opportunity for reasonably correlated data to be analysed against public policy. We describe some initial steps in undertaking such an analysis by performing standard economics calculations on this data. Through the examination of three key questions that are central to the relationship between these documents, economic implications of the existing policy are highlighted against the reported threats. Somewhat inevitably, the results echo the well worn ‘it depends’ answer to the question of cyber security expenditure need; nevertheless, in doing so, they do help indicate the dependencies. |
spellingShingle | Heitzenrater, C Simpson, A Policy, statistics and questions: Reflections on UK cyber security disclosures |
title | Policy, statistics and questions: Reflections on UK cyber security disclosures |
title_full | Policy, statistics and questions: Reflections on UK cyber security disclosures |
title_fullStr | Policy, statistics and questions: Reflections on UK cyber security disclosures |
title_full_unstemmed | Policy, statistics and questions: Reflections on UK cyber security disclosures |
title_short | Policy, statistics and questions: Reflections on UK cyber security disclosures |
title_sort | policy statistics and questions reflections on uk cyber security disclosures |
work_keys_str_mv | AT heitzenraterc policystatisticsandquestionsreflectionsonukcybersecuritydisclosures AT simpsona policystatisticsandquestionsreflectionsonukcybersecuritydisclosures |