The Cybersecurity, Trust and Resilience department addresses the protection of connected, data-intensive and cyber-physical systems. Its work connects secure architectures, privacy and cryptography with governance, human factors and operational continuity.
Research and technical scope
- Security-by-design and privacy-by-design for software, platforms, services and distributed systems.
- Cryptographic protection, confidential processing, post-quantum approaches, identity and access management, and privileged-access risks.
- Trust, assurance, governance, compliance-oriented design and responsible innovation.
- AI security, data integrity, model robustness and trustworthy automation.
- Security and resilience for IoT, edge systems, cloud services, APIs and constrained cyber-physical environments.
Applied cybersecurity capabilities
The department supports threat modelling, enterprise security architecture analysis, penetration-testing scenario design, NIS2-oriented requirements analysis, log-source mapping and controlled validation. Work considers how safeguards support continuity, usability, incident preparedness and clear responsibility across the system lifecycle.
These capabilities are relevant to ICT service management, industrial systems, energy operators, agro-industrial environments and organisations that depend on trusted digital services.
How we work
Research and technical development are combined with architecture design, prototyping, pilot support, analysis and interdisciplinary validation. Collaboration with research and industry partners supports the dissemination of non-confidential results and practical methods for dependable digital systems.