syssec_red_book

20. Horizon2020• “Making cyber security a positive business case” Focusing on economicsand explaining the cost of security, and qualifying security products.• “The role of technology” Security should be built-in by design andsecurity products should be sent to market when they are ready, insteadof when they are half-baked.• “Defining cyber security metrics” Security metrics must be developed,and compliance and benchmarking should be applied where possible.There is a serious lack of statistics and information about cyber securityevents, and this must be addressed.20.1.3 RecommendationsThe group of experts proposed the following instruments to address thechallenges of cyber security:• Fund R&D activities• Promote demonstrators• Support infrastructure build-up• Provide users with education and training• Give incentives20.2 Societal Perspective20.2.1 SummaryThe Trust and Security Unit at DG Connect held a workshop in October 2012focusing on Horizon 2020 [2]. The goal of the meeting was to invite participantsto contribute their opinions on the societal issues of cyber security. The expertsprovided input on both substantive and procedural issues.20.2.2 Procedural IssuesThe experts identified the following procedural issues in terms of the societalperspective on cyber security:• “Widening the modalities of the public-private cooperation” A modelwas suggested where a private company funds a public research lab todo research with them or for them, EU-funds could be added to thateffort, in order to leverage the private investment124