Cyber Risk Economics Capability Gaps Research Strategy

Cybersecurity is a multidimensional challenge that demands interdisciplinary attention. The Department of Homeland Security Science and Technology Directorate (DHS S&T) Cyber Risk Economics (CYRIE) program supports research, development, and operationalization of technical and knowledge solutions that improve value-based decision making by those who own, operate, protect, and regulate the nation’s vital data assets and critical infrastructures. The focus extends beyond the traditional economics view of incentives for cybersecurity to consider business, legal, technical, and behavioral factors that impact cyber risk. CYRIE R&D emphasizes the empirically based measurement, modeling and evaluation of cybersecurity investment, impact and incentives. The objective of this research strategy and the CYRIE program is to close the gap between research and practice by apprising the research community of real-world cyber risk economics challenges, and, ultimately, to inform evidence-based policy and actions by industry and government.