Cyber Crime Probability

1. Develop and refine a theoretical cyber-risk assessment model enabling BreachAware to expand the into the B2C market.

2. Integrate the model into BreachAware’s current business processes and structures to provide insights for future development.

3. Use the model to produce case studies that will give real world context to the impact that data breaches have on individuals.

1. Build an initial theoretical model for calculating the overall impact of different cyber-crimes on the individual using BreachAware’s existing data types and impact scores.
2. Conduct an integrative literature review of research and grey literature to build examples to examine, critique, and synthesise secondary data to generate new insights and perspectives.
3. Validate and refine the theoretical model and its outputs, combining BreachAware’s data processes and structures with the findings of the literature review.
4. Develop illustrative case studies using the refined model and based on highly publicised, recent data breaches (such the recent EasyJet data breach, in which email addresses, travel details, credit or debit card details were accessed/stolen), to enhance understanding and interpretability, and to exemplify use of the model.
5. Present the cyber-risk model along with the research conducted, the analysis, findings and recommendations in a report to BreachAware.

This project provided BreachAware with a more focused and structured system to utilise the data it collects, delivering more informative insights in less time. It also created a new type of information for BreachAware, providing systematic understanding of cyber-risk at the individual level. This new knowledge and capability facilitated expansion into the B2C market, informing the direction of growth, focus of effort and allocation of resources.