Many cyber security failures in systems and organisations can only be explained and appropriately addressed by examining the problem through not only from the technical point of view but also through a deep societal, institutional and economic analysis.
Moreover, current structures at institutional level (national and international) as well as incentive frameworks (financial or regulatory, positive or negative) don't seem to be able to provide adequate coverage to threats.Scope:
With a multidisciplinary approach combining economic, behavioural, societal and engineering insights, measurement approaches and methodologies and combining methods from microeconomics, econometrics, qualitative social sciences, behavioural sciences, decision making, risk management and experimental economics, proposals are expected to cover one of the following two strands:
For both strands proposals should also investigate improvements and/or alternatives to current institutional and governance frameworks (market-driven as well as national and international regulatory) with a view to improving cybersecurity.
Based on their results, proposals should provide a set recommendations addressed to all relevant stakeholders including policy makers, regulators, law enforcement agencies (where applicable) as well as relevant market operators and insurance companies.
The Commission considers that proposals requesting a contribution from the EU between EUR 1 and 2 million would allow these areas to be addressed appropriately. Nonetheless, this does not preclude submission and selection of proposals requesting other amountsExpected Impact: