Dependability Policy Development

1. Dependability Policy Development Desire/Define Workshop Pisa 26 November 2002 Andrew Rathmell

2. Contents • Why Policy? • The DDSI Experience • R&D Vision • Policy Support in FP6 www.ddsi.org

3. Why Policy? • What is the point of this research? • What societal problems are we addressing? What are the benefits to European society? • Meeting the needs of the value chain • Citizens, business, suppliers, governments • A societal, business & technical vision www.ddsi.org

4. The Challenge “Information and communication infrastructures have become a critical part of our economies. Unfortunately, these infrastructures have their own vulnerabilities and offer new opportunities for criminal conduct … there is little doubt that these offences constitute a threat to industry investment and assets, and to safety and confidence in the information society.” Feira Council, 2000 www.ddsi.org

5. Dependability Policy in Europe • Considerable activity in European countries but progress is very uneven • Cyber-crime initiatives; awareness & alerting; ad hoc R&D • Few strategic policy approaches • Distinctive but embryonic European-wide approach • eEurope – Information Society; industrial competitiveness • Fragmented approaches: Cyber-security; cyber-crime; privacy • Uneven private sector responses • Some public-private partnerships have been established www.ddsi.org

6. Contents • Why Policy? • The DDSI Experience • R&D Vision • Policy Support in FP6 www.ddsi.org

7. The DDSI Experience • Sponsored by DG Infso • Consortium of 9 policy & technical research centres in 9 European countries • DDSI achievements on information infrastructure dependability: • Unique global survey to provide baseline data • Policy roadmaps on priority issues • Built community of interest Reference Group • Industry • Govt • Academia • EU/US June 01-Nov 02 www.ddsi.org

8. DDSI Issues • Concepts • Security, dependability, survivability, etc • Global Inventory/Benchmarking • 42 countries, IGOs, NGOs • Public Policy • Public Private Partnerships • Warning and Information Sharing • R&D Policy www.ddsi.org www.ddsi.org

9. Contents • Why Policy? • The DDSI Experience • R&D Vision • Policy Support in FP6 www.ddsi.org

10. R&D Vision • Challenge is clear • Societal dependence upon large, unbounded, multi-jurisdictional socio-technical systems • Ambient Intelligent Space as the new infrastructural paradigm • Strategic Goals and societal impact? • Benefits to European society • Component level (warrantable software) to boost IT industry • System and societal level – Focus upon services • Social, political, business goals - “Dependability Gap” www.ddsi.org

11. Dependability Approaches • Improving dependability is a means • Making dependability an integral property of the Knowledge Society • But do not have adequate analytical frameworks and methods for the new environment • So, “revolution” or “paradigm shift” required • Draw from other disciplines/communities • Especially for task of characterising the infrastructures (e.g. Complex Systems Theory) • Practical applications of biomimetic approaches, financial market modelling, oceanography, etc www.ddsi.org

12. Take-Up • Two way dialogue between researchers, implementers and users • Mechanisms for “tactical” research • Assisting users with identification of applicable techniques & approaches • Awareness activities to stimulate market • School, corporate, public education • Market mechanisms (e.g. corporate governance, liability, insurance, legislation) • Education & skills www.ddsi.org

13. Contents • Why Policy? • The DDSI Experience • R&D Vision • Policy Support in FP6 www.ddsi.org

14. The Opportunity • Europe has a unique window of opportunity to ensure that the Knowledge Society is trustworthy, dependable & promotes Europe’s economic and social values • By adopting a systematic, strategic approach, Europe can shape the future infrastructure and ensure that its digital citizens are empowered and protected www.ddsi.org

15. The Goal To help European policy-makers, business leaders and citizens to take a strategic approach to information infrastructure dependability and to manage the risks … By consolidating a sustainable multi-disciplinary platform for analysis of the policy aspects of information infrastructure dependability …with clear “customers” www.ddsi.org

16. Knowledge Platform • Knowledge infrastructure for policy analysis: • human capital (education & exchanges) • baseline data (database; comparative policy analysis; standards; incident data) • intellectual tools (impact assessments; benchmarking & RoI) • physical & virtual community building www.ddsi.org

17. Research • Prospective & Reactive • Multi-disciplinary • Community Building: common ownership of knowledge • Risk governance of complex infrastructures • Economics of dependability • Policy impact (simulation) • Early warning and alerting • Statistics & standards • Cascading impacts & emergency response • Threat Modelling • Etc … www.ddsi.org

18. Outreach • Systematically gather policy/societal/business user needs & requirements • Industry & user sectors • Communicate research results & raise awareness • Awareness (policy-makers; press) • Education (youth) • Stimulate market mechanisms (business drivers) • Liase with European partners (e.g. USA) www.ddsi.org

19. How?…”DPSI EoI” • European-wide consortium of research bodies already embedded in dependability/ICT policy-making • Complementary expertise (policy, legal, technical, business, etc) • Strong international advisory body • combining EU institutions, MS, NAS, Industry, R&D, external partners Embed policy & outreach into Desire & Define www.ddsi.org