Year 2 Student - 2025 Cohort - Cohort 7

I hold an undergraduate degree in Cyber Security and subsequently worked for three years in the banking sector as an Application Support Engineer. I then completed my MSc in Cyber Security from Glasgow Caledonian University, where my dissertation focused on comparing VPN technologies in cloud environments.

My current research interests centre on Security and Privacy, Network Security, and the Internet of Things, with a particular focus on the Internet of Medical Things (IoMT). I am drawn to understanding how resource-constrained devices can maintain robust security whilst ensuring interoperability, and how technical, human, and regulatory factors intersect in healthcare cybersecurity contexts.

From Recovery to Recoverability: Continual Assurance of Backup and Recovery Systems

Organisations increasingly require controls that are verified, tested, and designed to ensure resilience
in the face of rising real-world compromise. Resilience matters because prevention alone no longer suffices; the question for many organisations is not if they will face an attack, but when, and how effectively they can recover. Among the mechanisms that contribute to resilience, backups are pivotal: the National Cyber Security Centre (NCSC) identifies them as an essential component of response and recovery.

My current research interests centre on the cyber resilience of digital infrastructures, and my PhD focuses on the continual assurance of backup and recovery systems. I take a full-system approach (beyond data) and an end-to-end approach to assuring these systems. Through this research, I aim to assess the recoverability of these systems. I hope to see a shift from uncertain recovery attempts during a cyberattack to confident, resilient strategies through recoverability indicators.

- SCULI - Addressing the Challenge, London, 2026
- Infosecurity Europe, 2026
- BSides Bristol, 2026
- Cyber Secure Everywhere Summer School, Bath, 2026

Academic Placement - Supervisor: Professor Awais Rashid. During this placement, I carried out research on establishing the criteria for the effectiveness of backup and recovery systems.

Industry Placement - Vodafone Group PLC. This placement involved exploring how industry knowledge of backup resilience can inform actionable guidance for improving ransomware recovery.

https://www.linkedin.com/in/joel-anyam-22b270a9/