The ECSEPA Policy Crisis Game

That’s right, despite being a far cry from your average Tuesday night murder mystery game at the local pub, the ECSEPA Policy Crisis Game that took place in London on 21 February 2019 was designed to be just as gripping and thought-provoking. More importantly, according to one participant, “the real-world value of the Game was that it brought together the policy community working across the UK Government under one roof” to exchange views on complex and profound issues in cyber.  From officials leading incident response to advisors overseeing long-term planning, the participants hailed from a diverse base of cybersecurity specialisations. The aim of the Game? To explore how the UK policy community makes decisions as a series of simulated cyber crisis scenarios unfold throughout the day.

During the game, a mixed set of evidence was presented to the attendees to tease out security implications and strategic approaches in response to the evolving situations.  Spanning socio-economic considerations to cyber-physical impacts on the populous, the interactive sessions brought to light a number of policy challenges.  These included how to determine the threshold of cyber-physical incident triggers, how to gauge proportionate response, and how to improve cross-government coordination mechanisms.

 

While it’s not the only game in town that investigates cyber policy response, with another such example being the Cyber 9/12 Student Challenge, the human dimension of the ECSEPA project is inimitable amongst its contemporaries in so far as game design is concerned.  It was developed with and for the policy community, one of the trademark research principles that sets STEaPP projects apart from other interdisciplinary studies: action research through co-design and co-production of projects with government stakeholders. But it’s not over just yet for the ECSEPA project.  In fact, over the course of 2019, the ECSEPA team will be releasing their findings back to the policy community in a usable way.  Their impact-driven approach to policy engagement is spearheaded by STEaPP’s newly formed Policy Impact Unit (PIU).

 

The ECSEPA project is funded by the EPSRC and undertaken with the full support of the Digital Policy Lab (DPL) and the Research Institute in Science of Cyber Security (RISCS) based in STEaPP.  Apart from undertaking cutting edge research, DPL members also run the Digital Technologies and Public Policy (DTPP) stream in STEaPP’s MPA programme.