Cybersecurity is a fundamental property throughout the lifecycle of digital systems, particularly cyber-physical systems, where it underpins safety and resilience. We aim to develop cybersecurity principles, methods, and tools for the future assurance of cyber-physical systems.
Cybersecurity assurance is the process of providing confidence that digital systems, infrastructure, data, and processes are protected and functioning as intended, even in the face of cyber threats. Effective cybersecurity assurance must be continuous rather than solely depending on periodic assessments. Technologies, vulnerabilities, and threats are constantly evolving, and stakeholders such as vendors and system owners need continuous insight into the cybersecurity state of their systems. Additionally, emerging regulations introduce new compliance requirements for both providers and owners of digital systems and services.
Our research explores how best practices from IT security, OT security, and safety engineering can be integrated into a unified risk-based approach. Key research challenges include cyber risk quantification, continuous monitoring and risk management of cyber-physical systems, and understanding how emerging technologies such as artificial intelligence and quantum technologies will both challenge and support future cybersecurity practices.
Sign up for the upcoming Cybersecurity Research Day
On 10 September, we will host the DNV Cybersecurity Research Day at our Heaadquarters in Høvik, Norway. The event will be dedicated to cybersecurity assurance through continuous risk management and certificationn. Participation is free, but seats are limited.
Learn more and register here.
We look forward to seeing you in Høvik.
Explore our cybersecurity research projects
CyberNEMO
Building on the NEMO (Next Generation Meta Operating System) project, the CyberNEMO project strengthens end‑to‑end cybersecurity and trust across IoT-Edge-Cloud environments (often called the computing continuum). This EU‑funded research initiative brings together DNV and 22 partner organizations to advance cybersecurity resilience, risk preparedness, situational awareness, threat detection, and mitigation for critical infrastructure and its supply chains.
CertifAI
The EU‑funded CertifAI research project brings together DNV and 11 partner organizations. The aim of the project is to investigate and develop AI‑empowered approaches to the certification of information and communication technology (ICT) systems, driven by emerging EU cybersecurity legislation.