In terms of research, the previous section describes five peer-reviewed research publications that all advance the state of the art. For example, the SoK was published at IEEE Security & Privacy Symposium, an A+ venue. We proposed a novel causal framework for cyber risk and already saw researchers use this framework and attribute it to our article [1]. This represents an overwhelming success for the first work package. We also published a journal article for the second work package. While this was published in a new journal, we did so because it is read by both practitioners and academics. It was cited 3 times in 2021 and 2 times in 2022. He also published the first empirical analysis of privacy insurance for individuals, which could become a new research area. The final contribution in this direction is our WACCO submission. Notably, the bachelors student and Daniel won 2nd prize in a competition for their submission "Reviewing the Likelihood of Cyber Incident" at the RISCS Cyber Risk and Quantification workshop, which is based on the same work.
In terms of Daniel's career, he has accepted a lecturer position at the University of Edinburgh, a highly ranked and prestigious university in the UK. This is an overwhelming success given the competitive job market, and will allow him to continue working on these topics. During the course of the fellowship, he was invited onto the Workshop on the Economics of Information Security committee for two years running and became associate editor at the Digital Threats: Research and Practice journal. Also in terms of practitioner outreach, he is co-chair of the FIRST cyber insurance special interest group. He broadened his research profile and began supervising other researchers, four masters students and one bachelors.Together these outcomes represent a success in terms of the career development aspect of the fellowship.
Finally, in terms of out reach and dissemination, we took a number of steps. We tried to invest in high-quality presentation videos for each, all of which are now shared on YouTube. This helps disseminate the results beyond the tiny fraction of the world who attend academic conferences. Daniel also ran a practitioner Twitch workshop, a novel way to engage practitioners during the pandemic. He also shares research widely over LinkedIn and engages practitioners in that way, contributing to wider socio-economic impact. While it is difficult to measure this impact, engagement statistics provide one window. His posts regularly receive over a thousand views, with one achieving over 5,000. Daniel also appeared on a number of podcasts including one ran by the World Bank. All of these efforts to reach out were evidence of Daniel's commitment to sharing science.
[1] von Skarczinski, Bennet Simon, Arne Dreissigacker, and Frank Teuteberg. "More Security, less Harm? Exploring the Link between Security Measures and Direct Costs of Cyber Incidents within Firms using PLS-PM." Wirtschaftinformatik (2022).
