Leadership Systems beyond a Single Founder
Identify decision, succession and learning structures that make institutions less dependent on one person.
GRS Editorial · GLRRead guideGRS editorial · Digital research
Studying Cyber Resilience beyond Technical Controls
Frame cyber resilience as an institutional capability involving people, governance and recovery.
Digital research
A practical starting point.
Frame cyber resilience as an institutional capability involving people, governance and recovery. This guide offers a starting method for teams developing research and institutional decisions. Adapt it to the question, context and relevant scientific, ethics and data requirements.
Step 01
Define the outcome
Technical controls matter, but resilience concerns the ability to anticipate, withstand and recover from disruption. Specify the essential service, acceptable interruption and affected stakeholders. This makes the question measurable without publishing sensitive operational details.
Step 02
Study the system
Map decision rights, supplier dependencies, incident learning and workforce capability alongside technology. Surveys can reveal perceived readiness; exercises and documented incidents provide different evidence. None should be presented as a complete security audit without appropriate scope and authority.
Step 03
Choose meaningful measures
Time to detect, restore critical services and communicate with users may be more informative than a raw number of incidents. Interpret each measure with reporting incentives and severity in mind. Compare organisations only where their mandates and exposure are sufficiently similar.
Step 04
Translate findings safely
Report patterns and governance recommendations at a level that does not expose vulnerabilities. Agree disclosure rules with participants before data collection. The goal is defensible institutional learning, not a public score that encourages concealment.
Illustrative application
What this could look like.
A comparative study of hospitals could examine how critical services are restored after an outage. Researchers might interview governance leads and use anonymised exercise results, while avoiding publication of network diagrams or exploitable details. The comparison should account for service complexity and incident reporting practices before drawing conclusions about institutional readiness.
Put it into practice
A short working checklist.
- Write the precise decision or research question this work should support.
- Record the sources, methods, stakeholders and permissions needed before proceeding.
- Agree who reviews the output and how limitations will be communicated.
- Set a date to revisit the decision when evidence or conditions change.
GRS Group editorial guide · Published 24 September 2026 · Informational guidance, not an empirical study or formal professional advice.
Related research
Continue with the centre and knowledge model.
Global Cybersecurity & AI Research Center Research & Knowledge All guidesFurther reading