GCRI · Cybersecurity and Digital Resilience
Research and evidence
The research behind Cybersecurity and Digital Resilience: the questions it asks, the models and measurements it uses, how uncertainty is stated and how a result is reviewed and reproduced before it is published.
Research and evidence on the record.
- 02STEM methods6 canonical methods applied
- 03Topics8 subject pages
- 04Counterparts7 platforms in shared fields
- 05PublisherThe Global Centre for Risk and Innovation
- 06Methods uncertaintyMethods and uncertainty
- 07Source dataSource and data register
What the research asks.
- 01
Cyber risk management
Threat exposure, vulnerabilities and controls.
- 02
Critical service cyber
Cyber-physical lifelines and safety.
- 03
Cloud and third parties
Concentration and vendor dependency.
- 04
Identity and data security
Authentication, authorisation and privacy.
- 05
Information operations
Information integrity and digital disruption.
- 06
Incident response recovery
Detection, containment, restoration and evidence.
What cyber research cannot yet answer well enough for decisions.
Cyber research here concentrates on systemic exposure: shared providers, shared software and the physical consequences of digital failure.
- How concentrated are critical services on a few cloud and identity providers? See cloud and third parties.
- Which software supply-chain controls reduce correlated compromise most? See supply-chain security.
- How do cyber incidents in critical services produce physical consequences? See critical service cyber.
- How long will post-quantum migration take for large organisations? See post-quantum migration.
Every result keeps its label.
Results are labelled as observed, published statistics, estimated, modelled, forecast, scenario or expert judgement. Missing data is shown as missing, never filled silently.
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Pages in Research and evidence.
Questions and answers.
Can I propose a research question?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GCRISend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGCRISee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.