Skip to content

GCRI · Cybersecurity and Digital Resilience

Programmes and projects

How Cybersecurity and Digital Resilience organises work into programmes: global priorities, regional applications and country work, each shown with its actual status.

Open Global subject programme Back to Cybersecurity and Digital Resilience
01Workspace

The workspace for programmes and projects.

Programme board

Enterprise network · Programmes and projects · Cycle 2 of 4 · Example interface, not a record

  • Workstreams active
    8Active
  • Milestones due this quarter
    4Watch
  • Decisions pending with owners
    4Watch
  • Open risks
    11
Quarter review dueGCRI · Cybersecurity and Digital Resilience

Workstreams

by stage

Scoping02
Incident response playbooksWS-692 · owner: Security operations centre
CSF 2.0 profile, current and targetWS-784 · owner: Security operations centre
In delivery02
Post-quantum inventoryMilestone M5 · slipping
Identity hardeningMilestone M4 · on plan
Review01
OT segmentationIndependent reviewer named
Closed01
Third-party risk programmeClosure note on record

Gates

  1. Requestowner named
  2. Scoping noteboundary
  3. Qualifiedinputs
  4. BuildFoundry
  5. Testcontrolled
  6. Publishwith limits
  7. Decisionauthority
Programme board.Illustrative interface; not live data.

Cybersecurity and Digital Resilience · Programme board. Programme board: example names and illustrative values, not a record.

02Levels

Three levels of work.

03Three levels

How cyber work is organised globally, regionally and nationally.

Cyber norms are agreed globally, cooperation and regulation are increasingly regional, and incident response and critical-service duties are national.

  • Global: norms of state behaviour, shared threat knowledge, standards.
  • Regional: regional regulation and cooperation networks.
  • National: national CSIRTs, critical-service duties and resilience.
04Process

How the process runs.

Process explorer · Process

Programmes and projects: Programme through eight gates

11 steps4 stages8 gates

Process

Programmes and projects: Programme through eight gates

The Global Risks Forum (GRF) records eight yearly gates, each a programme decision; a gate not passed stops its work, and the competent authority decides outside.

  1. 01 Q1 · Planning

    1. 01G0 · Annual programme authorisedGate · The Global Risks ForumGRF authorises the annual mandate. It never sets a national agenda.
    2. 03Route the candidate mission to standardsStep · Nexus StandardsNexus Standards routes each candidate mission to the standards and profiles that apply.

  2. 02 Q2 · Readiness and build

    1. 04G1 · Missions admittedGate · The Global Risks ForumGRF admits missions with reasons recorded. It cannot admit a mission without an accountable owner.
    2. 05G2 · Data and resources qualifiedGate · The Global Risks ForumReadiness preparation closes when data, people and resources are qualified.
    3. 06G3 · Build accepted for exerciseGate · The Global Risks ForumGRF records whether the build is accepted for exercise. A gate not passed stops the work it governs.

  3. 03 Q3 · Action Week

    1. 07G4 · Controlled live operation authorisedGate · The Global Risks ForumGRF authorises controlled live operation for Action Week.
    2. 08G5 · Evidence sealed and stand-down recordedGate · The Global Risks ForumThe evidence is sealed with its provenance and the stand-down is recorded.

  4. 04 Q4 · Reporting and renewal

    1. 02Competent authority decides and actsActor · The competent authorityThe competent authority decides and acts under its own rules. The programme informs it and never decides for it.
    2. 09Scientific and editorial reviewStep · Reviewers and the publisherQualified, conflict-managed reviewers and the publisher decide what is accepted. Institutions cannot decide a scientific conclusion.
    3. 10G6 · Publication authorisedGate · The Global Risks ForumGRF authorises publication of results that have passed scientific and editorial review. It cannot publish personal data.
    4. 11G7 · Renewal reviewedGate · The Global Risks ForumGRF reviews renewal and sets the next cycle's mandate.

The programme year · The Global Risks Forum · Decision rightsDesigned programme process, not a record of operation. No cycle has run and every programme is at service level R0. A gate is a programme decision, never a public-authority approval, certification or deployment authorisation.

05Status

Every programme shows where it stands.

A programme is shown as exploring, forming, constituted, active, paused or archived, according to its record. A plan is never presented as an activity.

06Sources

Where this page's references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

07Pages

Pages in Programmes and projects.

Page

Global subject programme

Page

Regional subject applications

Page

Country applications

08Questions

Questions and answers.

How does a country take part?
Through its national programme. Country enquiries go to the Consortium Secretariat at Contact or a regional desk.
Cybersecurity and Digital Resilience

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

Propose a method See all contact routes
Legal

Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.