Progress and Research in Cybersecurity - Supporting a resilient and trustworthy system for the UK

Executive summary
Digital systems have transformed, and will continue to transform, our world. Supportive government policy, a strong research base and a history of industrial success make the UK particularly well-placed to realise the benefits of the emerging digital society. These benefits have already been substantial, but they remain at risk. Protecting the benefits and minimising the risks requires reliable and robust cybersecurity, underpinned by a strong research and translation system.
Trust is essential for growing and maintaining participation in the digital society. Organisations earn trust by acting in a trustworthy manner: building systems that are reliable and secure, treating people, their privacy and their data with respect, and providing credible and comprehensible information to help people understand how secure they are.
Resilience, the ability to function, adapt, grow, learn and transform under stress or in the face of shocks, will help organisations deliver systems that are reliable and secure. Resilient organisations can better protect their customers, provide more useful products and services, and earn people’s trust.
Research and innovation in industry and academia will continue to make important contributions to creating this resilient and trusted digital environment. Research can illuminate how best to build, assess and improve digital systems, integrating insights from different disciplines, sectors and around the globe. It can also generate advances to help cybersecurity keep up with the continued evolution of cyber risks.
Translation of innovative ideas and approaches from research will create a strong supply of reliable, proven solutions to difficult to predict cybersecurity risks. This is best achieved by maximising the diversity and number of innovations that see the light of day as products.
Policy, practice and research will all need to adapt. The recommendations made in this report seek to set up a trustworthy, self-improving and resilient digital environment that can thrive in the face of unanticipated threats, and earn the trust people place in it.
Innovation and research will be particularly important to the UK’s economy as it establishes a new relationship with the EU. Cybersecurity delivers important economic benefits, both by underpinning the digital foundations of UK business and trade and also through innovation that feeds directly into growth. The findings of this report will be relevant regardless of how the UK’s relationship to the EU changes.
Headline recommendations
● Trust: Governments must commit to preserving the robustness of encryption, including end-to-end encryption, and promoting its widespread use. Encryption is a foundational security technology that is needed to build user trust, improve security standards and fully realise the benefits of digital systems.
● Resilience: Government should commission an independent review of the UK’s future cybersecurity needs, focused on the institutional structures needed to support resilient and trustworthy digital systems in the medium and longer term. A self-improving, resilient digital environment will need to be guided and governed by institutions that are transparent, expert and have a clear and widely-understood remit.
● Research: A step change in cybersecurity research and practice should be pursued; it will require a new approach to research, focused on identifying ambitious high-level goals and enabling excellent researchers to pursue those ambitions. This would build on the UK's existing strengths in many aspects of cybersecurity research and ultimately help build a resilient and trusted digital sector based on excellent research and world-class expertise.
● Translation: The UK should promote a free and unencumbered flow of cybersecurity ideas from research to practical use and support approaches that have public benefits beyond their short term financial return. The unanticipated nature of future cyber threats means that a diverse set of cybersecurity ideas and approaches will be needed to build resilience and adaptivity. Many of the most valuable ideas will have broad security benefits for the public, beyond any direct financial returns.

Collectively coping with contact: The role of intragroup support in dealing with the challenges of intergroup mixing in residential contexts

The social identity approach to stress has shown how intragroup support processes shape individuals' responses to stress across health care, workplace, and community settings. However, the issue of how these 'social cure' processes can help cope with the stress of intergroup contact has yet to be explored. This is particularly important given the pivotal role of intergroup threat and anxiety in the experience of contact as well as the effect of contact on extending the boundaries of group inclusion. This study applies this perspective to a real-life instance of residential contact in a divided society. Semi-structured interviews with 14 Catholic and 13 Protestant new residents of increasingly mixed areas of Belfast city, Northern Ireland, were thematically analysed. Results highlight that transitioning to mixed communities was fraught with intergroup anxiety, especially for those coming from 'single identity' areas. Help from existing residents, especially when offered by members of other religious denominations, signalled a 'mixed community ethos' to new residents, which facilitated adopting and sharing this identity. This shared identity then enabled them to deal with unexpected intergroup threats and provided resilience to future sectarian division. New residents who did not adopt this shared identity remained isolated, fearful, and prone to negative contact.

Location decision-making of 'creative' industries: the media and computer games sectors in Dublin, Ireland

There has been significant research undertaken examining the “creative class” thesis within the context of the locational preferences of creative workers. However, relatively little attention has been given to the locational preferences of creative companies within the same context. This paper reports on research conducted to qualitatively analyse the location decision making of companies in two creative sectors: media and computer games. We address the role of the so-called “hard” and “soft” factors in company location decision making within the context of the creative class thesis, which suggests that company location is primarily determined by “soft” factors rather than “hard” factors. The study focuses upon “core” creative industries in the media and computer game sectors and utilises interview data with company managers and key elite actors in the sector to investigate the foregoing questions. The results show that “hard” factors are of primary importance for the location decision making in the sectors analysed, but that “soft” factors play quite an important role when “hard” factors are satisfactory in more than one competing city-region.