Cyber Resilience, Safety and Security

Safety and Security

References

Partnering for Cyber ResilienceCyber risk is a systemic challenge and cyber resilience a public good. Every organization acts as a steward of information they manage on behalf of others. And every organization contributes to the resilience of not just their immediate customers, partners and suppliers but also the overall shared digital environment. In order to ensure security and resilience, organizations, both public and private, must develop the capabilities to ensure their own resilience through internal governance structures and behaviours as well as work with other organizations (enterprises, governments, and civil society) in order to ensure systemic security and resilience. The Forum has committed to support the development of cyber resilience governance capabilities at the enterprise and national level by creating tools, sharing best practices, and convening all stakeholders to effectively make decisions about their shared security responsibilities. In 2018, the Forum will expand on these efforts in two ways: Enterprise: Accelerating adoption of the Board Tools and Principles as well as creating new cyber risk governance tools for executives.Government: Fostering discussion and cooperation between the public and private sector on cyber security policy issues using the Cyber Playbook for Public-Private Cooperation. Background Through a number of multistakeholder working groups the Forum community has already contributed substantially to this space. Some specific outputs have included: - Advancing Cyber Resilience: a 2016 programme dedicated to empowering boards and executive teams with tools and practices to identify and manage the business risks emanating from cyber threats- Beyond Cybersecurity: book reviewing primary research with over 200 organizations on ‘gamechanging’ actions for business and governments- Towards the Quantification of Cyber Threats: innovative risk quantification model “Cyber Value-at-Risk” lays the foundation for consistent quantification within and across enterprises, potentially leading to further development of risk transfer/cyber insurance markets- Risk and Responsibility in a Hyperconnected World: analysis of global macro impact (up to $3 trillion/5% global GDP by 2020), future scenarios and a shared Framework for Global Collaboration- Development of Principles & Guidelines (100+ CEO/Minister/SG level signatories across 14 industries and 23 countries), including Cyber Risk Framework and Maturity Model, further expanded here

Platform for Good Digital IdentityAs more people, devices and associated personal data get online, there is growing focus on a foundational element of this new digital environment – our identities. The ability to prove we are who we say we are will increasingly determine our opportunities to establish trust with each other and to carry out meaningful interactions in a digital economy. If approached right, it represents transformative opportunities such as access to basic services and more customized digital experiences, enhanced health and well-being, improved traceability in supply chains, citizen safety and global biodiversity protection. Yet we are still learning what “identity in a digital world” means. We are also still evolving policies and practices on how best to collect, process or use identity-related data in ways that empower individuals without infringing on their freedoms or causing them harm. There is significant room to improve how identity data is handled online, and how much control individuals have in the process.At the World Economic Forum’s Annual Meeting 2018 in Davos, a diverse group of public and private stakeholders committed to shared cooperation on advancing good, user-centric digital identities. Since then, a broader group of stakeholders has joined this conversation: experts, policy-makers, business executives, practitioners, rights advocates, humanitarian organizations and civil society.The Platform for Good Digital Identity seeks to advance global progress towards digital identities that satisfy at least five criteria: they are fit for purpose, inclusive, useful, secure, and offers choice to individuals. It will do so by advancing collaboration on six key areas:– Moving the emphasis beyond identity for all, to identities that deliver user value– Creating metrics and accountability for good identity– Building new governance models for digital identity ecosystems– Promoting stewardship of good identity– Encouraging partnerships around best practices and interoperability where appropriate– Innovating with technologies and models and building a library of successful pilots

Report abuse