I\u2019m pleased to share that my latest research paper has been accepted for presentation at the International Conference on Internet of Things, Big Data and Security (IoTBDS 2026).<\/p>\n\n\n\n
The paper introduces a quantitative framework for measuring human-layer cyber resilience<\/strong>, transforming common phishing telemetry into measurable indicators of organisational readiness.<\/p>\n\n\n\n Using four widely available signals \u2014 Delivered, Clicks, Reports, and Report Time<\/strong> \u2014 the model derives three metrics:<\/p>\n\n\n\n \u2022 Phish Click Rate (PCR)<\/strong> \u2013 susceptibility to phishing Together, these convert phishing awareness outcomes into auditable evidence aligned with ISO\/IEC 27001, ISO\/IEC 27004, and NIS2 expectations for operational resilience<\/strong>.<\/p>\n\n\n\n The work addresses a common governance challenge: organisations can demonstrate that training occurred, but rarely that human behaviour measurably improves defensive readiness<\/strong>.<\/p>\n\n\n\n This research forms part of the broader DSCR initiative, which focuses on translating cyber security telemetry into structured metrics that help organisations understand and demonstrate cyber resilience<\/strong>.<\/p>\n\n\n\n Further research will extend this approach into ransomware propagation modelling and enterprise structural risk analysis.<\/p>\n","protected":false},"excerpt":{"rendered":" I\u2019m pleased to share that my latest research paper has been accepted for presentation at the International Conference on Internet of Things, Big Data and Security (IoTBDS 2026). The paper introduces a quantitative framework for measuring human-layer cyber resilience, transforming common phishing telemetry into measurable indicators of organisational readiness. Using four widely available signals \u2014 Delivered, Clicks, Reports, and Report Time \u2014 the model derives three metrics: \u2022 Phish Click Rate (PCR) \u2013 susceptibility to phishing\u2022 Time-to-Report (TTR) \u2013 detection…<\/p>\n
\u2022 Time-to-Report (TTR)<\/strong> \u2013 detection agility
\u2022 Phish Resilience Ratio (PRR)<\/strong> \u2013 a composite resilience indicator<\/p>\n\n\n\n