We are pleased to release a new RISCS briefing exploring the impact of the COVID-19 pandemic on cyber security of organisations, created as part of the RISCS Fellowship in Leadership and Culture.


Already in March 2020, it was evident the rapid transition into working remotely would impact on the security of organisations, as well as on the wellbeing of employees. How exactly it would do so was impossible to predict, given the complexity of such changes, as well as their unprecedented nature. The paper published today, authored by Georgia Crossland and Amy Ertan, builds upon the research they completed over the last few months working together with the RISCS Fellow in Leadership and Culture, Berta Pappenheim. The team interviewed 18 cyber security leaders from a wide range of industries to understand not only the effects the transition had itself, but also to gain an insight into various consequences that came about only as we have worked remotely for an unexpectedly prolonged period. The common themes from the interviews are organised into 9 findings, and the authors also provide actionable recommendations for senior leadership colleagues.

I chose this research theme to capture any significant changes happening in the employee-employer relationship due to the sudden increase in remote working.

 

My company’s research suggested that stress impacts decision-making, particularly during a cyber-incident response. Any increases in background stress, caused maybe by family or caring commitments, or transactional stress, maybe caused by having to use new remote-working tools, seemed likely to increase the risk of bad decision-making.

 

I am proud that, together with the Authors and with the support of NCSC and the RISCS team, we have achieved an important piece of work. It is one of the first papers looking at this subject, and the contemporaneous evidence base should provide a valuable future resource for others following on.

Berta Pappenheim, RISCS Fellow in Leadership and Culture

The publication is, to the best of our knowledge, the first comprehensive analysis covering these highly current and extremely important issues through rigorous, qualitative research. It is directed at all audiences, including academic researchers, the policy community, and industry stakeholders. We recommend familiarising yourself with the results, and for your convenience an Executive Summary is provided at the beginning of the document.


Amy Ertan
Georgia Crossland
Berta Pappenheim