They have conducted scenario analysis (albeit some years ago now) on cyber security - developing multiple scenarios and the policy impacts today (or 2018) that stem from them