Cybersecurity and Digital Resilience
The Global Centre for Risk and Innovation (GCRI)
Topics at Cybersecurity and Digital Resilience: the pages in this section are listed below, each with its own scope and status.
GCRI · In development · service level R0
The Cybersecurity and Digital Resilience topics are the eight subject dossiers of its field, among them cyber risk management, critical service cyber, and cloud and third parties. Each dossier sets out how the risk develops, what is measured and in which units, the public sources and their licences, the methods, who decides and the limits of the evidence.
GCRI is a research, development and policy institution. It is not a regulator, and it does not certify, license or approve; its findings carry their methods and uncertainty.
The topics run from risk management and critical services through cloud, identity and information operations to response, supply chains and post-quantum migration.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Attack surface | The set of points where an attacker could try to enter or extract data from a system. |
| Industrial control system | A system of controllers and software that monitors and controls industrial processes. |
| Shared responsibility model | The division of security duties between a cloud provider and its customer. |
| Multi-factor authentication | Authentication requiring two or more independent factors, such as a password and a device. |
| Disinformation | False or misleading information that is created or spread deliberately to deceive people. |
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Threat exposure, vulnerabilities and controls.
TopicCyber-physical lifelines and safety.
TopicConcentration and vendor dependency.
TopicAuthentication, authorization and privacy.
TopicInformation integrity and digital disruption.
TopicDetection, containment, restoration and evidence.
TopicSoftware and hardware dependency risk.
TopicCryptographic transition requirements.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.