Global Cyber Security Capacity Centre (GCSCC), University of Oxford Information

The Global Cyber Security Capacity Centre (GCSCC) at the University of Oxford is a leading multidisciplinary research centre on efficient and effective cybersecurity capacity building. It has created the Cybersecurity Capacity Maturity Model (CMM) for Nations, the first-of-its-kind model to review a country’s cybersecurity capacity maturity. Together with Capacity Centre’s key strategic international partners, such as the World Bank, the Organization of American States (OAS), the Commonwealth Telecommunications Organisation (CTO), and the International Telecommunication Union (ITU), the CMM was successfully deployed in over 60 countries around the world since 2015. This has been significantly underpinned by a regional study in Latin America and the Caribbean through collaboration with the OAS. The review process and resulting reports, drafted by the GCSCC, enable governments to benchmark national cybersecurity policy and strategies, cybersecurity culture, knowledge development, legal and regulatory frameworks, and risk controls. The results and recommendations enable nations to better plan national strategies, facilitate international and regional collaboration and cooperation, and set priorities for strategic investment and capacity development. To foster global knowledge exchange and transfer of expertise gained in the global community, the GCSCC also runs the publically-available Cybersecurity Capacity Portal, a global online resource for good practice and knowledge in cybersecurity capacity building, which also includes a mapping of international and regional capacity building efforts by the various actors in the field. You can visit our Cybersecurity Capacity Portal here: https://www.sbs.ox.ac.uk/cybersecurity-capacity The Centre is also developing a Cyber Harm Framework (CHF), a holistic and robust model for understanding the harm experienced by nations as a result of a lack of capacity, and how this can be reduced. Together, these complementary models provide nations with a comprehensive framework to make better-informed decisions to improve planning, avoid duplication and enable better-strategised capacity building investments. The deployment of the model has been in itself an effective capacity building exercise and has been informing the thinking of the global community. The GCSCC encourages the further uptake of the model by other countries and international community actors and has constant conversations with regional organisations, governments, private companies and other research institutions who work on this issue. It also has recently established its first regional partnership with the Oceania Cybersecurity Centre in Melbourne/Australia, which will be the focal point for cybersecurity capacity building in the region.