Índice de riesgo cibernético
Index of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
geometric
equal weights · floor 0.1 where geometric
1,000 draws
normalisation, weights, aggregation, imputation
3 components
12 leaf indicators
67% minimum
modelled share ≤ 40%
From indicators to the composite
Combines hazard, exposure and capability in the INFORM pattern so that a highly digital, well-defended economy and a lightly digital, undefended one are not confused.
- Ciberincidentes significativos por millón de habitantesIndicator · IND · /10*6/aNumber of cyber incidents in the year that a national CERT or regulator classifies as significant (material service disruption, data compromise or financial loss), per million population.
- Ciberincidentes que interrumpen servicios críticosIndicator · IND · 1Number of cyber incidents in the year that disrupted an essential service (energy, water, health, transport, finance, digital infrastructure), counted from mandatory incident reports and verified public disclosure.
- Personas que usan InternetIndicator · IND · %Share of individuals who used the Internet from any location and device in the last three months.
- Valor añadido de los servicios TIC, porcentaje del PIBIndicator · IND · %Gross value added of telecommunications, computer programming and information services (ISIC Rev.4 divisions 61–63) as a percentage of GDP.
- Desarrollo del gobierno electrónicoIndicator · IND · scoreUN E-Government Development Index (0–1), combining online-service provision, telecommunication infrastructure and human capital, carried as an external source series.
- Pilar de medidas jurídicas del GCI de la UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for laws and regulations on cybercrime, cybersecurity, data protection and critical-infrastructure protection.
- Pilar de medidas técnicas del GCI de la UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national and sectoral incident response teams, technical frameworks and protection of critical systems.
- Pilar de medidas organizativas del GCI de la UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national strategy, a responsible agency, and metrics for cybersecurity governance.
- Pilar de medidas de desarrollo de capacidades del GCI de la UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for awareness campaigns, curricula, professional training and research and industry development.
- Pilar de medidas de cooperación del GCI de la UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for bilateral, multilateral and public-private cooperation agreements and information-sharing arrangements.
- Equipo nacional de respuesta a incidentes informáticos en funcionamientoIndicator · IND · yes or noWhether the economy has a government-mandated national computer emergency or security incident response team that is operational and reachable by constituents (1 yes, 0 no).
- Legislación vigente de protección de datos y privacidadIndicator · IND · yes or noWhether a general data protection and privacy law is in force in the economy (1 yes, 0 no; draft legislation counts as 0).
- Cyber incident pressure sub-indexSub-index · SUB · w 1 · 33.3%Composite of the significant-incident rate and critical-service incidents.
- Digital dependence sub-indexSub-index · SUB · w 1 · 33.3%Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
- Cyber capability sub-indexSub-index · SUB · w 1 · 33.3%Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
- Índice de riesgo cibernéticoDomain index · IDX · geometricIndex of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
- Fragilidad macrofinanciera y estructuralPillar · PILLAR · 5 indicesHow much fiscal, financial, external, digital and technological room does the system have before stress turns into crisis?
- NXS-GRX (canonical data, provenance and risk) Composite RiskComposite · COMPOSITE · four pillarsComposite = (HTE × VUL × MSF × LCC)^(1/4), each pillar on 0–10 floored at 0.1; pillar = expert-weighted geometric mean of its domain indices
Run this index’s own aggregation
Set each component, change the aggregation or the weight uncertainty, and watch the interval, the class probability and each component’s contribution respond.
Treatment, normalisation, weighting, aggregation, uncertainty
- Treatment
- WINSORISE
- Outlier rule
- |skew| > 2, kurtosis > 3.5
- Normalisation
- INFORM 0–10 rescaling
- Imputation
- NONE
- Coverage minimum
- 67% of components
- Modelled share cap
- 40% of weight
- Weighting
- equal
- Aggregation
- geometric
- Scale
- 0 to 10
- Incertidumbre
- 1,000 Monte Carlo runs over normalisation, weights, aggregation, imputation
- Framework basis
- INFORM risk algebra (hazard, exposure, lack of coping capacity); OECD/JRC Handbook (2008); ITU GCI 2024 (capability input)
3 components, 12 indicators
Cyber incident pressure sub-index w 1
Composite of the significant-incident rate and critical-service incidents.
| Indicador | Unidad | Evidencia | Fuentes | Proporción |
|---|---|---|---|---|
Ciberincidentes significativos por millón de habitantesIND.CYB.incidents.significant_incident_rate | /10*6/a | Class D | national-cert-annual-reports, enisa-threat-landscape, eu-nis2-incident-reporting, commercial-threat-telemetry-licensed | 50.0% |
Ciberincidentes que interrumpen servicios críticosIND.CYB.incidents.critical_sector_incidents | 1 | Class E | eu-nis2-incident-reporting, national-cert-annual-reports, verified-public-disclosures | 50.0% |
Digital dependence sub-index w 1
Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
| Indicador | Unidad | Evidencia | Fuentes | Proporción |
|---|---|---|---|---|
Personas que usan InternetIND.INF.digital.internet_users | % | Class B | itu-datahub, wb-wdi, national-ict-household-surveys | 33.3% |
Valor añadido de los servicios TIC, porcentaje del PIBIND.CYB.dependence.ict_services_share.gdp | % | Class B | un-national-accounts-main-aggregates, oecd-stan, unctad-digital-economy | 33.3% |
Desarrollo del gobierno electrónicoIND.CYB.dependence.egovernment_development | {score} | Class C | un-desa-egovernment-survey | 33.3% |
Cyber capability sub-index w 1
Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
| Indicador | Unidad | Evidencia | Fuentes | Proporción |
|---|---|---|---|---|
Pilar de medidas jurídicas del GCI de la UITIND.CYB.capability.gci_legal | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas técnicas del GCI de la UITIND.CYB.capability.gci_technical | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas organizativas del GCI de la UITIND.CYB.capability.gci_organizational | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas de desarrollo de capacidades del GCI de la UITIND.CYB.capability.gci_capacity_development | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas de cooperación del GCI de la UITIND.CYB.capability.gci_cooperation | {score} | Class C | itu-gci-2024 | 16.7% |
Equipo nacional de respuesta a incidentes informáticos en funcionamientoIND.CYB.capability.national_cert | {bool} | Class B | itu-national-cirt-list, first-member-directory, itu-gci-2024 | 8.3% |
Legislación vigente de protección de datos y privacidadIND.CYB.capability.data_protection_law | {bool} | Class B | unctad-global-cyberlaw-tracker, national-legal-gazettes | 8.3% |
Ciber y digital
Cyber-security commitment and capability, digital dependence and incident exposure.
| Sub-domain | Indicadores |
|---|---|
| Cyber capability | 9 |
| Incidents | 2 |
| Digital dependence | 2 |
Anchor frameworks (pillar structure and definitions only): ITU GCI 2024; Basel operational-risk event types.
All 13 cyber and digital indicators
| Indicador | Dominio | Sub-domain | Componente | Unidad | Niveles | Crosswalks |
|---|---|---|---|---|---|---|
Puntuación del Global Cybersecurity Index de la UITIND.CYB.capability.gci_score | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Overall score |
Nivel en el Global Cybersecurity Index de la UITIND.CYB.capability.gci_tier | CYB | Cyber capability | vulnerability | {class} | COUNTRY | ITU_GCI Tier |
Pilar de medidas jurídicas del GCI de la UITIND.CYB.capability.gci_legal | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Legal Measures |
Pilar de medidas técnicas del GCI de la UITIND.CYB.capability.gci_technical | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Technical Measures |
Pilar de medidas organizativas del GCI de la UITIND.CYB.capability.gci_organizational | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Organizational Measures |
Pilar de medidas de desarrollo de capacidades del GCI de la UITIND.CYB.capability.gci_capacity_development | CYB | Cyber capability | adaptive capacity | {score} | COUNTRY | ITU_GCI Capacity Development Measures |
Pilar de medidas de cooperación del GCI de la UITIND.CYB.capability.gci_cooperation | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Cooperation Measures |
Equipo nacional de respuesta a incidentes informáticos en funcionamientoIND.CYB.capability.national_cert | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Technical Measures |
Legislación vigente de protección de datos y privacidadIND.CYB.capability.data_protection_law | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Legal Measures |
Ciberincidentes significativos por millón de habitantesIND.CYB.incidents.significant_incident_rate | CYB | Incidents | hazard | /10*6/a | COUNTRY | |
Ciberincidentes que interrumpen servicios críticosIND.CYB.incidents.critical_sector_incidents | CYB | Incidents | impact | 1 | COUNTRY | |
Valor añadido de los servicios TIC, porcentaje del PIBIND.CYB.dependence.ict_services_share.gdp | CYB | Digital dependence | exposure | % | COUNTRY | WB_WDI BX.GSR.CCIS.ZS |
Desarrollo del gobierno electrónicoIND.CYB.dependence.egovernment_development | CYB | Digital dependence | exposure | {score} | COUNTRY |
Cyber risk index, world
The world reading of this index, every country as a tile and the largest movements since the previous edition.
- Edición anterior
- –
- Range since 2016
- –
- Compuesto acoplado
- –
- Puntuación de acoplamiento S
- –
- Pulso, última semana
- –
- Outlook, 12 months
- –
- Método
- Indicator Standard 1.0 · NXS-GRX 2026
- Extracciones
- 1,000
Aún no hay valores publicados. La primera edición trazará aquí la serie histórica con su banda de intervalo y los límites de clase.
Country values
- Teselas
/api/v1/public/grix/risk-products/tiles/cyb/{z}/{x}/{y}.mvt- Clave de observación
nis:IDX.CYB.capability.cyber_risk:{ISO3}:{YEAR}:A
Series that read this index
Crosswalks and validity checks
Crosswalks map leaf indicators to source code lists; established indices are used for validity checks, never re-weighted as inputs.
| Code system | Leaf indicators mapped |
|---|---|
ITU_GCI | 7 |
WB_WDI | 2 |
SDG | 1 |
Platforms, standards and ways to take part
Field and service platforms of GCRI, GRF and GRA, the Nexus Risk Standards for this domain, learning, working groups and open calls. Every link is a live page.
Citar y reutilizar
See this index in every country profile
Each profile shows this index with its interval and class once released.
Estado
La metodología, la estructura y las definiciones de The Global Risks Index son un borrador de trabajo preparatorio (2026), difundido para examen y comentarios y no para su aplicación. Ningún valor aparece hasta que se publica una edición a partir de un corte de evidencia gobernado; los valores incluyen entonces intervalos, clases, fuentes y su vía de corrección. Los simuladores aplican los métodos publicados a las cifras que usted elija y nunca muestran un valor del NXS-GRX.
Lo que NXS-GRX no es
NXS-GRX es información de investigación y analítica de riesgos. No es una calificación crediticia ni ESG y no usa ninguna escala de calificación; no es un índice de referencia para instrumentos financieros, ni estadística oficial, ni una alerta de emergencia o clasificación oficial, ni asesoramiento. No debe usarse para evaluar a personas físicas. Las clases de riesgo son bandas en una escala publicada, nunca clasificaciones de países ni de personas.
Instituciones y fuentes
The Nexus Consortium is stewarded by three independent not-for-profit institutions: The Global Centre for Risk and Innovation (GCRI), through GCRI US in Washington, DC and GCRI Canada in Ontario, with GCRI Canada as Lead Institution, Consortium Secretariat and lead contracting organisation; The Global Risks Forum (GRF); and The Global Risks Alliance (GRA). Technology, infrastructure and service providers work with the Consortium at arm’s length under written agreements, like every other external party in the public-private-planet model, and hold no role in its stewardship.
Cada valor lleva la atribución de sus fuentes, que conservan sus propias licencias. Los nombres externos se citan únicamente a efectos de interoperabilidad. Los textos de autoría de Nexus están destinados a publicarse bajo CC BY 4.0.
Avis en français
La méthodologie et les définitions du NXS-GRX sont un projet de travail préparatoire (2026). Le NXS-GRX est une information de recherche et d’analyse des risques : ni notation, ni indice de référence financier, ni statistique officielle, ni alerte, ni conseil. Les classes de risque sont des bandes sur une échelle publiée, non des classements.