1. Cybersecurity Assessment Framework (MCSAF) focused on multidisciplinary assessment of system failures Andrzej Bialas andrzej.bialas@ibemag.pl Institute of Innovative Technologies EMAG, Katowice, Poland Role: WP leader Proposal activity: DS-04-2016: Economics of Cybersecurity. Disclaimer: with the submission of this presentation the consent is given by its author for the organisers to distribute the presentation. SMIG2016 - 26-27 January 2016 1

2. 1. To develop the Multidisciplinary Cybersecurity Assessment Framework (MCSAF) and tool encompassing Digital assets specification and pricing Engineering insight (technology, assurance) Risk management Economic factors assessment (cost, benefits) Intangible qualitative factors (behavioural, social, political, cultural, …) Economic experiments Behavioural experiments Institutional and governance cybersecurity frameworks assessment Cybersecurity frameworks assessment with respect to the identified criteria MCSAF management, knowledge base and reporting the aggregated results SMIG2016 - 26-27 January 2016 2 2. To investigate institutional and governance frameworks with a view to improve their cybersecurity 3. To provide a set of recommendations addressed to all relevant stakeholders

3. 3 Digital assets specification and pricing Risk management Cybersecurity frameworks assessment MCSAF management, knowledge base and reporting Engineering insight (technology, assurance) Economic factors (cost, benefits) assessment Intangible qualitative factors assessment Economic experiments Behavioural experiments Aggregated results Cybersecurity frameworks improvements Recommendations for stakeholders MCSAF SMIG2016 - 26-27 January 2016

4. Project participants Proposed coordinator: wanted Partners, other participants: EMAG, Poland Security experts – SME, Germany University of Economics, Poland Domain experts and software company, Spain Cybersecurity company – SME, Poland Looking for the following partners : Cybersecurity-related behavioural experiments experts Policy makers, regulators ICT infrastructures managers Institutional and governance cybersecurity frameworks owners/users Commercialization experts SMIG2016 - 26-27 January 2016 4