Policy, statistics and questions: Reflections on UK cyber security disclosures

Over the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by t...

Full description

Bibliographic Details
Main Authors: Heitzenrater, C, Simpson, A
Format: Journal article
Published: Oxford University Press 2016
_version_ 1826282288231481344
author Heitzenrater, C
Simpson, A
author_facet Heitzenrater, C
Simpson, A
author_sort Heitzenrater, C
collection OXFORD
description Over the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by the same department presents a unique opportunity for reasonably correlated data to be analysed against public policy. We describe some initial steps in undertaking such an analysis by performing standard economics calculations on this data. Through the examination of three key questions that are central to the relationship between these documents, economic implications of the existing policy are highlighted against the reported threats. Somewhat inevitably, the results echo the well worn ‘it depends’ answer to the question of cyber security expenditure need; nevertheless, in doing so, they do help indicate the dependencies.
first_indexed 2024-03-07T00:41:34Z
format Journal article
id oxford-uuid:8337f7ff-4810-488f-8f02-d14050ce281f
institution University of Oxford
last_indexed 2024-03-07T00:41:34Z
publishDate 2016
publisher Oxford University Press
record_format dspace
spelling oxford-uuid:8337f7ff-4810-488f-8f02-d14050ce281f2022-03-26T21:42:48ZPolicy, statistics and questions: Reflections on UK cyber security disclosures Journal articlehttp://purl.org/coar/resource_type/c_dcae04bcuuid:8337f7ff-4810-488f-8f02-d14050ce281fSymplectic Elements at OxfordOxford University Press2016Heitzenrater, CSimpson, AOver the last 3 years, the UK Government, through the Department for Business, Innovation & Skills (BIS), has taken a lead in the area of public disclosure on corporate cyber intrusions via their Information Security Breaches Survey. The recent development of the Cyber Essentials scheme by the same department presents a unique opportunity for reasonably correlated data to be analysed against public policy. We describe some initial steps in undertaking such an analysis by performing standard economics calculations on this data. Through the examination of three key questions that are central to the relationship between these documents, economic implications of the existing policy are highlighted against the reported threats. Somewhat inevitably, the results echo the well worn ‘it depends’ answer to the question of cyber security expenditure need; nevertheless, in doing so, they do help indicate the dependencies.
spellingShingle Heitzenrater, C
Simpson, A
Policy, statistics and questions: Reflections on UK cyber security disclosures
title Policy, statistics and questions: Reflections on UK cyber security disclosures
title_full Policy, statistics and questions: Reflections on UK cyber security disclosures
title_fullStr Policy, statistics and questions: Reflections on UK cyber security disclosures
title_full_unstemmed Policy, statistics and questions: Reflections on UK cyber security disclosures
title_short Policy, statistics and questions: Reflections on UK cyber security disclosures
title_sort policy statistics and questions reflections on uk cyber security disclosures
work_keys_str_mv AT heitzenraterc policystatisticsandquestionsreflectionsonukcybersecuritydisclosures
AT simpsona policystatisticsandquestionsreflectionsonukcybersecuritydisclosures