We focus on nine societal areas.
TNO cooperates with companies, the public sector and other organisations, to apply our knowledge and expertise with and for others.
We develop knowledge not for its own sake, but for practical application.
TNO offers you the chance to do groundbreaking work and help customers and society with innovative, practical and smart solutions.
The Shared Research Program (SRP) Cyber Security is a research and innovation program in which TNO and its partners are cooperating with the aim to improve cyber security, by means of innovation in technologies and processes. Current partners are TNO, ABN AMRO, Rabobank, ING, Achmea and de Volksbank.
The aim of the SRP is to improve the prevention and detection of cyber-attacks and the recovery thereafter. We do this by developing innovative technologies and methods based on expertise in the areas of security technologies and methodologies, data analytics, crisis management, behavioural sciences, information services and business analysis.
The SRP involves a multi-year commitment, in which the partners explore four lines of research:
By collaborating with our partners, we are able to ensure the relevance of our research and the valorisation of the expertise we are developing, which in turn will generate economic impact. This collaboration takes places in three areas:
The development of innovative technologies and methods will:
One of the SRP cybersecurity goals is to share the results with the security community, so the society as a whole will be more resilient against cyber attacks. One of the means to reach this goal is publishing the SRP magazine, which can be downloaded below.
Interested parties from any sector are welcome to join the SRP.
Financial Institutions have invested heavily in provisions that ensure an appropriate level of cyber resilience. But what is true cyber resilience and to which extent are current measures achieving it? And equally important: which capabilities or working areas require improvement and which effects can be expected from specific further investments (e.g. acquisition of a technical security solution or specific specialist training)?
Compelling questions such as these evoked a strong desire among financial institutions to measure and quantify the state of cyber resilience within their organizations. Since it was felt that traditional security metrics offer limited insight into the actual performance of cyber resilience provisions, an initiative was launched to jointly define a meaningful framework of cyber resilience metrics. The result of this work was compiled in a booklet to share the framework of cyber resilience metrics with other organisations that seek quantitative appraisal of their cyber security capabilities. The booklet is available here.