An exploration of cyber security governance for businesses in the UK and its policy implications
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
An examination of national cyber security governance is uncharted territory due to a lack of empirical evidence and data inaccessibility. This article describes how national cyber security governance in the UK is constructed and examines whether cyber threats and cybercrime against businesses are dealt with properly. It aims to find out its characteristics and suggest policy implications to other countries, based on critical analyses and evaluations of the UK governance. The national governance consists of three dimensions: (1) national structure, (2) initiatives to implement national strategies, and (3) reporting mechanisms. Analyses suggest that the UK’s model highlights the alignment of hierarchical strategies, program-based approach to implement the national strategies, and centralised reporting mechanisms. The key finding is that there is strong national leadership in the UK governance. The strong national leadership resulted in two things: (1) its orientation to proactive measures, and (2) the structured interdepartmental and public-private sector coordination. Given that cyber threats are increasingly asymmetric, automated, and global in a larger scale, it would be appropriate to have a governance which is driven by a centrally-led national framework. It is expected that the critical analyses of the UK’s cyber security governance should be of value to future studies which evaluate cyber security strategies or policies on the national level.
Abstract
An examination of national cyber security governance is uncharted territory due to a lack of empirical evidence and data inaccessibility. This article describes how national cyber security governance in the UK is constructed and examines whether cyber threats and cybercrime against businesses are dealt with properly. It aims to find out its characteristics and suggest policy implications to other countries, based on critical analyses and evaluations of the UK governance. The national governance consists of three dimensions: (1) national structure, (2) initiatives to implement national strategies, and (3) reporting mechanisms. Analyses suggest that the UK’s model highlights the alignment of hierarchical strategies, program-based approach to implement the national strategies, and centralised reporting mechanisms. The key finding is that there is strong national leadership in the UK governance. The strong national leadership resulted in two things: (1) its orientation to proactive measures, and (2) the structured interdepartmental and public-private sector coordination. Given that cyber threats are increasingly asymmetric, automated, and global in a larger scale, it would be appropriate to have a governance which is driven by a centrally-led national framework. It is expected that the critical analyses of the UK’s cyber security governance should be of value to future studies which evaluate cyber security strategies or policies on the national level.
참고문헌 (42)
- 김병화, "국내 사이버테러 정책수립을 위한 전략적 접근방안 : 영국의 사이버테러 정책을 중심으로", 시큐리티연구, (51), pp.171~196 (2017), 한국보안관리학회[DOI]
- 권장기, "자원 제약하의 중소기업 정보보안계획 수립방안 연구", 융합정보논문지, 7(2), pp.119~124 (2017), 중소기업융합학회[DOI]
- 권오국, "주요국의 사이버테러 대응체계와 시사점 분석 - 미국⋅영국⋅독일 사례의 비교를 중심으로 -", 시큐리티연구, (49), pp.185~214 (2016), 한국보안관리학회
- The new cyber security agenda: Economic and social challenges to a secure internet, "Bauer, J. M.", World Bank’s World Development, ~, pp.World Bank’s World Development(n.102965) (2015)
- Boyd, D., "Critical questions for big data: Provocations for a cultural, technological, and scholarly phenomenon", Information, communication & society, 15(5) (2012)
- Button, M., "The ‘fraud justice network’ and the infra-structure of support for individual fraud victims in England and Wales", Criminology & Criminal Justice, 13(1) (2013)
- Cabinet Office, "The UK cyber security strategy: Protecting and promoting the UK in a digital world", ~ (2011)
- Major Projects Authority annual report 2014-15, "Cabinet Office", ~ (2015)
- The CSQ Interview: Campbell McCafferty, "Cabinet Office", Government Chief Security Officer, ~ (2018)
- Clark, D., "National Research Council" (2014), The National Academies Press
- Procurement policy note–Use of cyber essentials scheme certification, "Crown Commercial Service", ~, pp.Action Note 09 (2014), 14
- Department for Digital, Culture, Media and Sport, "Cyber security breaches survey 2017", ~ (2017)
- Department for Digital, Culture, Media and Sport, "Cyber security breaches survey 2018", ~ (2018)
- Department for Digital, Culture, Media and Sport, & Vaizey, E, "New £5000 Government grant for SMEs to boost cyber security", ~ (2015)
- Department for Business, Innovation and Skills, "Call for evidence on a preferred standard in cyber security", ~ (2013)
- Department for Business, Innovation and Skills, "Cyber Essentials Scheme: Summary", ~ (2014)
- Cyber security - A new national Programme, "Downing, E", House of Commons Library, ~, pp.SN (2011), SC[DOI]
- Guitton, C, "Cyber insecurity as a national threat: overreaction from Germany, France and the UK?", European Security, 22(1) (2013)
- Harris, M., "Mobile device security considerations for small and medium-sized enterprise business mobility", Information Management & Computer Security, 22(1) (2014)
- Her Majesty's Inspectorate of Constabulary, "State of policing: The annual assessment of policing in England and Wales 2015", ~ (2015)
- National Security Strategy and Strategic Defence and Security Review 2015, "HM Government", TSO, ~ (2015)
- HM Government, "National Cyber Security Strategy 2016-2021", ~ (2016)
- House of Commons, "Protecting information across government(HC 769)", ~ (2017)
- Hunton, P, "Cybercrime and security: A new model of law enforcement investigation", Policing: A Journal of Policy and Practice, 4(4) (2010)
- Leukfeldt, R., "High volume cyber crime and the organization of the police: The results of two em pirical studies in the Netherlands", International Journal of Cyber Criminology, 7(1) (2013)
- Loveday, B, "The shape of things to come. Reflections on the potential implications of the 2016 Office of National Statistics crime survey for the police service of England and Wales", Policing: A Journal of Policy and Practice, 12(4) (2018)
- National Audit Office, "Update on the National Cyber Security Programme (HC 626)", ~ (2014)
- National Audit Office, "Protecting information across government (HC 625)", ~ (2016)
- National Cyber Security Centre, "The launch of the National Cyber Security Centre", ~ (2017)
- National Fraud Intelligence Bureau, "Action Fraud and National Fraud Intelligence Bureau (User Guide)", ~ (2013)
- National Police Chiefs’ Council, "Digital Investigation and Intelligence: Policing Capabilities for a Digital Age", ~ (2015)
- Office for National Statistics, "Crime in England and Wales: Year ending Sept 2016", ~ (2017)
- Ring, T, "UK cyber-strategy suffers as spooks meet the suits", Computer Fraud & Security, 2013(11) (2013)
- Sommer, P, "The future for the policing of cybercrime", Computer Fraud & Security, 2004(1) (2004)
- UK-CERT, "Cyber-security Information Sharing Partnership (CiSP)", ~
- Annual report 2015, "2016", UK-CERT, 2016, CUK-24-05-16-PD
- Wall, D, "Cybercrime" (2007), Polity
- Wall, D, "Policing cybercrimes: Situating the public police in networks of security within cyberspace (Revised Feb 2011)", Police Practice and Research, 8(2) (2011)
- Wall, D, "Information Technology and the Criminal Justice System", pp.77~98 (2015), Sage
- Yar, M, "Cybercrime and society" (2013), Sage
- "Frequently asked questions"[URL]
- "Critical national infrastructure"[URL]