European Investment Bank: The Creation of a Methodology to Identify Cyber Security Related Investments

The European Investment Bank required help to formulate a way of identifying the parts of projects, which can be considered to be ‘cybersecurity’ related, and to quantify those parts.

The main goals of the assignment were the following:

• To undertake a review of the EIB’s sectoral notes that establish which types of cybersecurity related investments are eligible on the basis of the sectoral lending policies.
• To refine the thinking/approach outlined in the notes, based on NRD Cyber Security’s experience in cybersecurity and propose an alternative approach if appropriate.
• To quantify cybersecurity related investments for each project type in the different sectors and provide a methodology that could also be applied to other financiers and project promoters.
• To confirm quantified figures through a targeted project promoter engagement, which will be managed by the Bank and by one or two other potential financing institutions.