An Evidence Quality Assessment Model for Cyber Security Policymaking

Sneha Dawda (1) , Madeline Carr (2) , Atif Hussain (3) , Siraj Shaikh (3) , Alex Chung (4)

1 Forrester Research [London]
2 RISCS - Research Institute in Science of Cyber Security
3 Coventry University
4 STEaPP - Department of Science, Technology, Engineering and Public Policy

A key factor underpinning a state’s capacity to respond to cyber security policy challenges is the quality of evidence that supports decision making. As part of this process, policy advisers, essentially a diverse group that includes everyone from civil servants to elected policy makers, are required to assess evidence from a mix of sources. In time-critical scenarios where relevant expertise is limited or not available, assessing threats, risk and proportionate response based on official briefings, academic sources and industry threat reports can be very challenging. This chapter presents a model for assessing the quality of evidence used in policymaking. The utility of the model is illustrated using a sample of evidence sources and it is demonstrated how different attributes may be used for comparing evidence quality. The ultimate goal is to help resolve potential conflicts and weigh findings and opinions in a systematic manner.

Mots clés: Evidence quality assessment; cyber security; policymaking

Domaines: Informatique [cs]

Sneha Dawda, Madeline Carr, Atif Hussain, Siraj Shaikh, Alex Chung. An Evidence Quality Assessment Model for Cyber Security Policymaking. 12th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2018, Arlington, VA, United States. pp.23-38, ⟨10.1007/978-3-030-04537-1_2⟩. ⟨hal-02076296⟩