GCRI · Cybersecurity and Digital Resilience

Innovation and practical technology

Technology relevant to cyber and digital resilience and critical infrastructure: what it can do, the constraints it faces and its consequences for people and institutions.

02Approach

Evaluate before adopting.

  1. 01

    Need

    Which problem does the technology address, and for whom?

  2. 02

    Evidence

    What has been demonstrated, under what conditions, and what remains untested?

  3. 03

    Constraints

    Cost, skills, infrastructure, data and governance requirements.

  4. 04

    Consequences

    Effects on safety, rights, equity and the environment.

03Technologies under assessment

What could change cyber practice, and what it still has to show.

TechnologyWhat it could changeWhat remains to be shown
Software bills of materials at scaleFaster response to component vulnerabilitiesAdoption and accuracy
Memory-safe languagesFewer exploitable bugsMigration cost of legacy code
Zero-trust architecturesLess lateral movement after compromiseImplementation complexity
Post-quantum cryptography deploymentProtection against future decryptionInventory and migration effort
04Build and test

From idea to tested capability.

Promising work can be built in Foundry and tested under controlled conditions through Universe. No technology is described as proven before it has been tested and reviewed.

05Sources

Where this page's references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

06Questions

Questions and answers.

Does the platform endorse products?
No. It evaluates technologies and publishes what it finds, with limits. It does not endorse, certify or recommend products or vendors.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRICybersecurity and Digital ResilienceStrategic SystemsScenario and Stress-Test
Cybersecurity and Digital Resilience

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

The Global Centre for Risk and Innovation

Science · evidence · measurement

Not for profit

Our articles, maps and twins are free to read and free to republish. Readers and partners keep it that way.

Partner with us

Who funds us

GCRI is a not-for-profit institution. To ask who funds a piece of work, use the funding questions form.

Independence

Editors and the expert reviewers named on each article decide what we publish. Funders and partners do not review or approve articles before publication.

Licence

Articles: CC BY 4.0. Figures, maps, twins and data: CC BY 4.0. Other uses: ask through the permissions form.