Cyber 9/12 Strategy Challenge Report. Team Polymath

In mid-February of this year, our team (First year CDT students, Rebecca Hartley, Alex Hodder-Williams, Sasha Lapiha, and Taylor Robinson) participated in the Cyber 9/12 Strategy Challenge. Our team was coached by former Cyber 9/12 participant and coach Nick Robinson and received additional valuable assistance from Ian Slesinger. The annual event, which was virtual this year, requires competitors to propose policy options to a panel of judges (acting as if they are from the Prime Minister's offices) responding to a fictional scenario involving a cyber threat. The competition aims to provide participants with an understanding of the technical, social, political, and economic impacts of cyber security events.  

Our team entered under the name "Polymath" which we wanted to reflect the multidisciplinary backgrounds of our members, representing many disciplines ranging from maths, computer science, international relations, and business.

This year's fictional scenario evolved around a climate activist group seeking to use cyberspace for activism. To do this, they found and exposed a vulnerability in an IoT chipset, which would allow them to shut down an unknown amount of industrial and home IoT devices. During the first round, the group carried out a test attack on morgue fridges at seven different sites across the UK. In the two weeks leading up to the competition, our role was to develop policies to anticipate and respond to the future escalation of the group's actions and any effects it may have on global supply chains.

After successfully making it into the second round of the competition, our team was provided with the second intelligence packet that informed us that the activist group successfully attacked chips in industrial air conditioning units in a "Whamazon" data centre located in the UK. These actions produced a cascading effect on related businesses, disrupting supply chains and simultaneously causing a variety of public responses on social media. Our team worked overnight to develop three more policies that responded to other potential attacks and threats to the supply chain. After approximately 2.5 hours of sleep, we successfully presented our policy decisions to the second panel of judges. Unfortunately, despite positive feedback, we did not make it into the final round of the competition.

Although we did not make it into the final round, we collectively found the competition a positive experience - especially from a team-building and research perspective.

As a team, we learnt greatly from each other's expertise. There were many instances that we disagreed on how to respond to certain information provided in the intelligence briefings. Our different interpretations made our team stronger and allowed us to think about the scenario more thoroughly. Real-world policymakers work with various sectors and disciplines daily, so having a multidisciplinary team allowed us to experience the benefits and challenges that policymakers face. This further established the essential need for public, private, and global collaboration to overcome cyber threats. Additionally, the time-pressured environment was a fulfilling experience. We were able to get a taste of how policymakers have to cope under pressure during an emergency.

Finally, during our preparation for both rounds we learnt about how current preparation and research is being conducted on the potential for a real life incident similar to Cyber 9/12.

Overall, we enjoyed the teamwork and simulated scenario of Cyber 9/12 and encourage future teams to get in touch for more information.

Comments

Post a Comment

Popular posts from this blog

Post-PhD thoughts on the Cyber Security field: Amy Ertan, 2017 CDT Cohort, now Cyber and Hybrid Policy Officer at NATO HQ in Brussels.

It has been just over a year since I successfully completed my viva – a milestone that initially felt both terrifying and insurmountable when I first joined the CDT. Now, I have the privilege of reflecting on my PhD journey and how its opportunities have shaped my present. I also wish to inspire curious students to embrace the full potential of the CDT and similar programs.   When I first came across the CDT application form, I initially envisioned transforming from a disillusioned city worker into a technical cyber security wizard, focusing on governance or incident response – as those were the only cyber security functions I was familiar with at the time. Very quickly, the CDT taught me that cyber security encompasses a vast and comprehensive range of approaches, offering me a holistic perspective on the field. Supported by the CDT, I engaged with exciting research and practitioner communities to learn about security governance, feminist and critical approaches, geography, the philos
Read more

Remote working and Cyber Security: Georgia Crossland and Amy Ertan

Image
Introducing the project The shift to remote working represents a huge shift for employees and organisations alike, introducing significant implications for cyber security. Amy Ertan and Georgia Crossland are currently working on a research project, in collaboration with the Research Institute for Sociotechnical Cyber Security (RISCS) and funded by the UK National Cyber Security Centre (NCSC), on the impact of remote working on cyber security and wellbeing. This blog post will give an overview of a section of this project, how remote working impacts cyber security. In response to COVID-19, in March 2020, organisations across the world made the rapid shift away from physical office working to remote working, wherever possible. This shift has had a significant impact across many aspects of organisations. This blog post will offer a high-level overview of how the cyber threat landscape was impacted for many organisations and may further change organisational cyber resilience. Remote workin
Read more

New Publication: Remote Working and (In)Security?: Amy Ertan

Image
A recent research report by CDT researchers Amy Ertan and Georgia Crossland has been published with the Research Institute for Sociotechnical Cyber Security (RISCS). The report examines ‘The Impact of Pandemic-Driven Remote Working on Employee Wellbeing, the Psychological Contract and Cyber Security’, with research carried out through a series of interviews with senior cyber security colleagues between January and April 2021. The full report can be found on the RISCS website: New publication: Remote Working and (In)Security | RISCS. Context In the UK and around the world, the impact of COVID-19 represented a total shift away from what was considered ‘normal living’. One aspect of this change was the rapid transition to remote working as people were encouraged to work from home and limit contact with others as far as possible through repeated lockdown conditions. Fellow CDT colleague Georgia Crossland and I were curious to explore how remote working has impacted the experiences - and se
Read more