25.03.2021A Tool to Visualze Risks

The tool "SERviz: a Security Economic and Risk Visualizer Tool" has been presented as one of the contributions of Task 4.3 (Economic Perspectives) of the European H2020 CONCORDIA project for the year 2020. Muriel Franco represented the Communication Systems Group CSG, Department of Informatics IfI at the University of Zurich UZH at project meetings at which he showed a live demo of the tool and explained its main features for the entire project, including partners from different industry sectors and universities.

The work started as part of the bachelor thesis conducted by Can Inan and supervised by Muriel during 2020, entitled "A Visual Tool for the Analysis of Cybersecurity Investments". Since then, the work has evolved to address different challenges that decision-makers face during the planning of their investments in cybersecurity. SERViz allows for a cybersecurity risk estimation of a company based on historical data, sector, and business characteristics (e.g., IT systems, protections, and employees' training). Besides that, SERViz can show directions on how to invest in cybersecurity by providing economic metrics for cybersecurity, such as the Return On Security Investment (ROSI). Thus, the user can understand different possibilities to improve the businesses security, while determining an efficient investment in cybersecurity (i.e., calculating how much budget to allocate for each of the required protection or measure).

Muriel Figueredo Franco