Risk Academy, a Nexortium programmeTechnology and Digital SystemsDepartment of Cyber, Digital and Space Systems

Threats, frameworks, incident response and cyber risk quantification

Cybersecurity and digital resilience

Cybersecurity and digital resilience covers the security and continuity of digital systems and the services that depend on them, against attack, failure and dependence on few providers.

risksacademy.comtechnology-digitaldiscipline

Cybersecurity and digital resilience, drawn as a circuit: 0 primary courses open, 2 in preparation, 2 approved for authoring and 3 also taught here, across 9 subtopics and 3 connected disciplines. Courses: RAF-116 L1 in preparation, RAT-218 L3 in preparation, RAS-425 L3 approved for authoring, RAT-261 L2 approved for authoring, RAN-318 L2 also taught here, RAN-322 L2 also taught here, RAT-204 L2 also taught here.
Cybersecurity and digital resilience at a glance. Drawn as a circuit.
  • Open, 0
  • In preparation, 2
  • Approved for authoring, 2
  • Also taught here, 3
  • Subtopics, 9
Course codes from the curriculum; study levels L1 to L4.
Twin builder and simulatorWest Cornwall: Goonhilly and the Porthcurno cable landings4 twin generators, 8 layers, 3 instruments
courses open now
0
in preparation
2
approved for authoring
2
satellite dishes
4

Twin figures for West Cornwall: Goonhilly and the Porthcurno cable landings, counted from its layers at their stated dates.

Twin builder and simulator.

For Cybersecurity and digital resilience: the faculty's twin of the Lizard and Penwith on the planet map, the globe and in 3D. Pick a generator, switch layers, run the instruments; every layer prints its provider and date.

West Cornwall: Goonhilly and the Porthcurno cable landings: a flat plan of the faculty twin. Terrain 0 to 245 m; 4 satellite dishes; 74 communication masts and towers; 12 telephone exchanges; 7 data centres and cable landing stations; 12 aerodromes; 1 telecom offices; Communication line 161 km; 729 known exploited vulnerabilities since 2023-10-17; Night-time lights, VIIRS day-night band: live, loads in the twin. Contours every 25 metres from the elevation grid; communication cables by class; ground infrastructure as marks.
West Cornwall: Goonhilly and the Porthcurno cable landings, United Kingdom. Flat plan of the same data: relief as contours from the inline grid, the mapped ground infrastructure by kind, the mapped cables and the numbers below. The 3D twin opens on devices with WebGL once its data and library have been checked.
  • Terrain 0 to 245 m
  • 4 satellite dishes
  • 74 communication masts and towers
  • 12 telephone exchanges
  • 7 data centres and cable landing stations
  • 12 aerodromes
  • 1 telecom offices
  • Communication line 161 km
  • 729 known exploited vulnerabilities since 2023-10-17
  • Night-time lights, VIIRS day-night band: live, loads in the twin
Credits and dates per layer are listed under the stage. Relief in the twin is exaggerated ×1.5 for legibility.

Drag to move, right drag or Shift with a drag to turn and tilt, Ctrl with the wheel to zoom. Keyboard: arrows move, Shift with arrows turn and tilt, + and - zoom, 0 resets, V steps through the views, Escape clears.

Flat plan of the same data: relief as contours from the inline grid, the mapped ground infrastructure by kind, the mapped cables and the numbers below. The 3D twin opens on devices with WebGL once its data and library have been checked.

The map loads from this site as it nears the view (MapLibre 6.9.1, checked by hash).

The discipline in brief.

The discipline teaches the threat landscape read from dated evidence such as the CISA KEV snapshot on the twin (729 entries added in three years, 109 flagged for known ransomware campaign use), cyber risk frameworks under ISO/IEC 27001:2022 and the NIST Cybersecurity Framework 2.0, identity and data security, zero trust, cloud and third-party concentration, software supply-chain security and software bills of materials, incident response and recovery objectives under ISO/IEC 27035 and ISO 22301, the operational resilience duties of Regulation (EU) 2022/2554 for financial services and Directive (EU) 2022/2555 for essential entities, and cyber risk quantification with FAIR. The threat picture is dated: ENISA's Threat Landscape 2025 found phishing the leading intrusion vector, increasingly supported by AI, and the EU Cyber Resilience Act's reporting duties for actively exploited vulnerabilities start on 11 September 2026. A graduate can rank what to patch first from catalogue evidence, quantify a loss scenario with stated frequency and magnitude ranges, and write an incident playbook with recovery time objectives.

This area covers the security and continuity of digital systems and the services that depend on them, against attack, failure and dependence on few providers. It is taught in the department of Cyber, Digital and Space Systems, Faculty of Technology and Digital Systems, through 2 courses with it as primary discipline and 3 more that also teach it.

What the discipline covers.

9 subtopics, taught across its courses and labs.

Courses
0 open, 2 in preparation
Levels
L1 Introductory, L3 Advanced
Labs
Network lab, GeoAI lab
  • Cyber threat landscape
  • Cyber risk management frameworks
  • Identity and data security
  • Cloud and third-party risk
  • Incident response and recovery
  • Critical service cyber resilience
  • Post-quantum migration
  • Software supply-chain security
  • Cyber risk quantification

Not yet taught by a course: Operational technology and critical infrastructure cyber resilience; Cyber as systemic risk and cyber insurance.

What is changing now.

Recent developments in cybersecurity and digital resilience, each with its source; sources checked on 16 October 2026. Summaries are short readings of the source; follow the link for the full account.

The faculty hub.

News and research as they are published, per discipline, with the faculty's other tools.

The newest research, preprints, news and humanitarian reports for Cybersecurity and digital resilience, each with its source and date, load here. Open the research and news hub

Frameworks and standards it works with.

From the Academy's risk taxonomy: the discipline's own entries and those of its primary courses, with how many courses teach each.

Frameworks and standards

  1. ISO/IEC 27001 information security1 course
  2. NIST Cybersecurity Framework1 course

Methods and practice

  1. Monte Carlo simulation and dependence1 course

Hazard families

  1. Data breach and privacy harm2 courses
  2. Ransomware and malware2 courses
  3. Attacks on operational technology1 course
  4. Technology and cloud outage1 course

2 in preparation.

No course with this primary discipline is open yet; these are planned, so you can prepare with the courses also taught here.

Introductory coverage: the only open course that teaches this discipline is a broad technology and data course; deeper courses are in preparation or on the authoring list.

Courses with this primary discipline0 open, 2 in preparation

  1. RAF-116Cyber Risk Foundations for Risk ProfessionalsIn preparationFoundation, L1 Introductory, 8 hours (estimate)
  2. RAT-218Cyber Risk QuantificationIn preparationTechnical, L3 Advanced, 10 hours (estimate)

Courses from other disciplines.

These courses count in their own primary discipline and also teach this one; they do not count towards its achievement as primary courses.

2 courses approved for authoring.

Approved for authoringno enrolment and no achievement until authored and reviewed

  1. RAS-425Cyber as Systemic Risk: Concentration, Accumulation and Cyber InsuranceApproved for authoringL3 Advanced, about 10 hours (estimate)
  2. RAT-261OT/ICS and Critical Infrastructure Cyber ResilienceApproved for authoringL2 Intermediate, about 10 hours (estimate)

Where the subject is worked on.

The three Foundry systems where it is practised.

How the subject is practised in labs.

LabWhat you do in itCourses using it
Network labBuild dependency graphs, find critical nodes, trace cascades3
GeoAI labApply Earth observation and machine learning to open imagery1

What you can earn here.

Disciplines it depends on.

Terms used on this page.

Cybersecurity and digital resilience

Start with an open course.

The catalogue lists each course with its outcomes, labs, hours and level.

Skip to toolbar