Capteurs, IoT et IoT industriel
Détection et contrôle connectés dans les villes, les services publics et l’industrie : surface d’attaque, intégrité des données et dépendance.
3
Infrastructure fragility · Cyber risk · Technology concentration risk.
65
3 index domains
19
Information and cyber-physical systems · Built systems
83
Critical infrastructure and industrial systems · Cyber, AI and frontier technology.
Scope and questions
The subject of this index is proposed by NXS-GRX (canonical data, provenance and risk); the Nexus Reports edition with the same code sets its own subject at commissioning, and any difference is recorded as a crosswalk.
- How large is the connected attack surface of essential services?
- Can sensor data be trusted in a crisis?
- Where is monitoring itself a single point of failure?
Domain indices to the series index
The series index is the expert-weighted geometric mean of its domain indices, with the intervals and class rule of the methodology.
How the Sensors, IoT and industrial IoT index is built
-
Fragilité des infrastructuresDomain index · IDX · INFIndex of transport and digital connectivity deficits, utility fragility, energy supply unreliability and realised disruption impact on a 0–10 scale, higher meaning more fragile.
-
Risque cyberDomain index · IDX · CYBIndex of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
-
Risque de concentration technologiqueDomain index · IDX · TECIndex of technology dependence, critical-mineral dependence and, inverted, innovation capacity and biosecurity oversight, on a 0–10 scale, higher meaning riskier.
-
Sensors, IoT and industrial IoT indexSeries index · SERIES · XT-09Détection et contrôle connectés dans les villes, les services publics et l’industrie : surface d’attaque, intégrité des données et dépendance.
-
Country readingsOutput · OUTPUT · 195 profilesPublished with intervals and classes when the edition is released.
-
Regional readingsOutput · OUTPUT · 5 regionsPublished with intervals and classes when the edition is released.
-
Global readingOutput · OUTPUT · population or exposure weightedPublished with intervals and classes when the edition is released.
Domain indices in this series
| Indice | Valeur | Variation | Variation % | Intervalle à 90 % | Classe · probabilité | Tendance | Plage |
|---|---|---|---|---|---|---|---|
Fragilité des infrastructuresNXS-GRX · INF |
– | – | – | – | – | ||
Risque cyberNXS-GRX · CYB |
– | – | – | – | – | ||
Risque de concentration technologiqueNXS-GRX · TEC |
– | – | – | – | – |
Domains read: Cyber and digital, Infrastructure, Technology and frontier.
65 indicators in scope
Every indicator whose primary or secondary domain is in scope, with unit, levels and crosswalks to source code lists.
| Indicateur | Domaine | Sub-domain | Composant | Unité | Niveaux | Crosswalks |
|---|---|---|---|---|---|---|
Dépendance nette aux importations de minerais critiquesIND.ECO.concentration.critical_minerals_import_reliance |
ECO | Export and import concentration | vulnerability | % |
COUNTRY | |
Commerce maritime exposé aux points d'étranglement maritimesIND.ECO.supply_chain.chokepoint_exposure |
ECO | Supply-chain exposure | exposure | % |
COUNTRY | |
Norme de conception de la protection contre les inondationsIND.HAZ.flood.flood_protection_standard |
HAZ | Flood | coping capacity | a |
COUNTRY, ADM1, CITY, SITE | |
Surface bâtieIND.HAZ.exposure.built_up_area |
HAZ | Exposition | context | km2 |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Surface bâtie en zones d'aléa élevéIND.HAZ.exposure.built_up_exposed |
HAZ | Exposition | exposure | km2 |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Densité routièreIND.ENV.land.road_density |
ENV | Land and forests | hazard | km/km2 |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Déchets solides municipaux gérés dans des installations contrôléesIND.ENV.pollution.msw_controlled_management.share |
ENV | Pollution and waste | coping capacity | % |
COUNTRY, CITY | SDG 11.6.1 EPI MSW |
Eaux usées traitées en toute sécuritéIND.WAT.quality.wastewater_safely_treated.share |
WAT | Water quality | coping capacity | % |
COUNTRY, CITY | SDG 6.3.1 EPI WWT |
PIB des activités dépendantes du GNSS, partIND.SPC.dependence.gnss_dependent_gdp.share |
SPC | Space-service dependence | exposure | % |
COUNTRY, PORTFOLIO | UNDRR_HIPS_2025 ET0102 |
Services critiques reposant sur des satellites sans secours, partIND.SPC.dependence.satellite_service_exposure.share |
SPC | Space-service dependence | vulnerability | % |
COUNTRY | |
Réseau haute tension en zones d'aléa géoélectrique élevé, partIND.SPC.dependence.grid_gic_exposure.share |
SPC | Space-service dependence | exposure | % |
COUNTRY, ADM1 | |
Temps de trajet jusqu'à l'établissement de santé le plus procheIND.HLT.system.health_facility_travel_time |
HLT | Health system capacity | vulnerability | min |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Population urbaine, part du totalIND.DEM.urbanisation.urban_share |
DEM | Urbanisation | context | % |
COUNTRY | WB_WDI SP.URB.TOTL.IN.ZS |
Croissance de la population urbaineIND.DEM.urbanisation.urban_growth |
DEM | Urbanisation | vulnerability | % |
COUNTRY | WB_WDI SP.URB.GROW |
Population urbaine vivant dans des bidonvillesIND.DEM.urbanisation.slum_share |
DEM | Urbanisation | vulnerability | % |
COUNTRY | WB_WDI EN.POP.SLUM.UR.ZS SDG 11.1.1 |
Coupures de courant subies par les entreprises au cours d'un mois typeIND.ENE.reliability.firm_power_outages |
ENE | Reliability | vulnerability | /mo |
COUNTRY | WB_WDI IC.ELC.OUTG |
Durée moyenne des interruptions du réseau (SAIDI)IND.ENE.reliability.saidi |
ENE | Reliability | vulnerability | h/a |
COUNTRY, ADM1, CITY | ISO_37120 ISO 37120:2018 |
Fréquence moyenne des interruptions du réseau (SAIFI)IND.ENE.reliability.saifi |
ENE | Reliability | vulnerability | /a |
COUNTRY, ADM1, CITY | ISO_37120 ISO 37120:2018 |
Concentration des fournisseurs de minerais critiques importésIND.ENE.minerals.critical_mineral_import_concentration |
ENE | Critical minerals | vulnerability | 1 |
COUNTRY | |
Population rurale à moins de 2 km d'une route praticable en toute saisonIND.INF.transport.rural_road_access |
INF | Transport | coping capacity | % |
COUNTRY, ADM1 | SDG 9.1.1 |
Performance logistiqueIND.INF.transport.logistics_performance |
INF | Transport | coping capacity | {score} |
COUNTRY | WB_WDI LP.LPI.OVRL.XQ |
Connectivité des transports maritimes réguliers par rapport à la frontièreIND.INF.transport.liner_shipping_connectivity |
INF | Transport | coping capacity | % |
COUNTRY | WB_WDI IS.SHP.GCNW.XQ |
Passagers aériens transportés par habitantIND.INF.transport.air_passengers.pc |
INF | Transport | coping capacity | {passengers}/a/{person} |
COUNTRY | WB_WDI IS.AIR.PSGR |
Population urbaine ayant un accès pratique aux transports publicsIND.INF.transport.public_transport_access |
INF | Transport | coping capacity | % |
CITY, ADM1, COUNTRY | SDG 11.2.1 ISO_37120 ISO 37120:2018 |
Réseau routier et ferroviaire en zones d'aléa élevé, partIND.INF.transport.network_exposed.share |
INF | Transport | exposure | % |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Personnes utilisant InternetIND.INF.digital.internet_users |
INF | Digital connectivity | coping capacity | % |
COUNTRY, ADM1, CITY | SDG 17.8.1 WB_WDI IT.NET.USER.ZS |
Population couverte par un réseau mobile, par technologieIND.INF.digital.mobile_network_coverage |
INF | Digital connectivity | coping capacity | % |
COUNTRY, ADM1 | SDG 9.c.1 |
Abonnements au haut débit fixe pour 100 habitantsIND.INF.digital.fixed_broadband |
INF | Digital connectivity | coping capacity | /10*2 |
COUNTRY, ADM1 | SDG 17.6.1 WB_WDI IT.NET.BBND.P2 |
Redondance des routes de connectivité internationaleIND.INF.digital.international_connectivity_redundancy |
INF | Digital connectivity | coping capacity | 1 |
COUNTRY | |
Heures de perturbation d'Internet à l'échelle nationaleIND.INF.digital.internet_disruption_hours |
INF | Digital connectivity | impact | h/a |
COUNTRY | |
Résilience du réseau électriqueIND.INF.utilities.power_grid_resilience |
INF | Utilities | coping capacity | {score} |
COUNTRY, ADM1, CITY | ISO_37123 ISO 37123:2019 |
Résilience du réseau d'approvisionnement en eauIND.INF.utilities.water_network_resilience |
INF | Utilities | coping capacity | {score} |
COUNTRY, ADM1, CITY | ISO_37123 ISO 37123:2019 |
Installations critiques disposant d'une alimentation de secours de 72 heuresIND.INF.utilities.critical_facility_backup_power |
INF | Utilities | coping capacity | % |
COUNTRY, ADM1, CITY | ISO_37123 ISO 37123:2019 |
Actifs d'approvisionnement en eau en zones d'aléa élevé, partIND.INF.utilities.water_assets_exposed.share |
INF | Utilities | exposure | % |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Actifs de production et de réseau électriques en zones d'aléa élevé, partIND.INF.utilities.power_assets_exposed.share |
INF | Utilities | exposure | % |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Installations vitales en zones d'aléa élevé, partIND.INF.utilities.lifeline_facilities_exposed.share |
INF | Utilities | exposure | % |
COUNTRY, ADM1, ADM2, CITY, GRID | |
Déficit d'investissement dans les infrastructures, part du PIBIND.INF.utilities.infrastructure_investment_gap.gdp |
INF | Utilities | vulnerability | % |
COUNTRY | |
City electricity interruption hours per customerIND.INF.urban.power_interruption_hours |
INF | Urban systems | vulnerability | h/a |
CITY | ISO_37120 ISO 37120:2018 |
Unités d'infrastructures critiques endommagées ou détruites par des catastrophesIND.INF.disruption.critical_infrastructure_damage |
INF | Service disruption | impact | 1 |
COUNTRY, ADM1 | SENDAI D-1 SDG 11.5.2 |
Établissements de santé endommagés ou détruits par des catastrophesIND.INF.disruption.health_facilities_damaged |
INF | Service disruption | impact | 1 |
COUNTRY, ADM1 | SENDAI D-2 |
Établissements d'enseignement endommagés ou détruits par des catastrophesIND.INF.disruption.education_facilities_damaged |
INF | Service disruption | impact | 1 |
COUNTRY, ADM1 | SENDAI D-3 |
Perturbations des services de base imputées aux catastrophesIND.INF.disruption.basic_service_disruptions |
INF | Service disruption | impact | 1 |
COUNTRY, ADM1 | SENDAI D-5 |
Pertes économiques directes subies par les infrastructures critiques, part du PIBIND.INF.disruption.critical_infrastructure_loss.gdp |
INF | Service disruption | impact | % |
COUNTRY, ADM1 | SENDAI C-5 |
Score de l'indice mondial de cybersécurité de l'UITIND.CYB.capability.gci_score |
CYB | Cyber capability | coping capacity | {score} |
COUNTRY | ITU_GCI Overall score |
Niveau de l'indice mondial de cybersécurité de l'UITIND.CYB.capability.gci_tier |
CYB | Cyber capability | vulnerability | {class} |
COUNTRY | ITU_GCI Tier |
Pilier mesures juridiques du GCI de l'UITIND.CYB.capability.gci_legal |
CYB | Cyber capability | coping capacity | {score} |
COUNTRY | ITU_GCI Legal Measures |
Pilier mesures techniques du GCI de l'UITIND.CYB.capability.gci_technical |
CYB | Cyber capability | coping capacity | {score} |
COUNTRY | ITU_GCI Technical Measures |
Pilier mesures organisationnelles du GCI de l'UITIND.CYB.capability.gci_organizational |
CYB | Cyber capability | coping capacity | {score} |
COUNTRY | ITU_GCI Organizational Measures |
Pilier mesures de renforcement des capacités du GCI de l'UITIND.CYB.capability.gci_capacity_development |
CYB | Cyber capability | adaptive capacity | {score} |
COUNTRY | ITU_GCI Capacity Development Measures |
Pilier mesures de coopération du GCI de l'UITIND.CYB.capability.gci_cooperation |
CYB | Cyber capability | coping capacity | {score} |
COUNTRY | ITU_GCI Cooperation Measures |
Équipe nationale de réponse aux incidents informatiques en activitéIND.CYB.capability.national_cert |
CYB | Cyber capability | coping capacity | {bool} |
COUNTRY | ITU_GCI Technical Measures |
Législation sur la protection des données et de la vie privée en vigueurIND.CYB.capability.data_protection_law |
CYB | Cyber capability | coping capacity | {bool} |
COUNTRY | ITU_GCI Legal Measures |
Cyberincidents importants par million d'habitantsIND.CYB.incidents.significant_incident_rate |
CYB | Incidents | hazard | /10*6/a |
COUNTRY | |
Cyberincidents perturbant des services critiquesIND.CYB.incidents.critical_sector_incidents |
CYB | Incidents | impact | 1 |
COUNTRY | |
Valeur ajoutée des services TIC, part du PIBIND.CYB.dependence.ict_services_share.gdp |
CYB | Digital dependence | exposure | % |
COUNTRY | WB_WDI BX.GSR.CCIS.ZS |
Développement de l'administration en ligneIND.CYB.dependence.egovernment_development |
CYB | Digital dependence | exposure | {score} |
COUNTRY | |
Dépense intérieure brute de R&D, part du PIBIND.TEC.capability.rd_expenditure.gdp |
TEC | Technology capability | adaptive capacity | % |
COUNTRY | SDG 9.5.1 WB_WDI GB.XPD.RSDV.GD.ZS |
Chercheurs par million d'habitantsIND.TEC.capability.researchers_per_million |
TEC | Technology capability | adaptive capacity | /10*6 |
COUNTRY | SDG 9.5.2 WB_WDI SP.POP.SCIE.RD.P6 |
Exportations de haute technologie, part des exportations de produits manufacturésIND.TEC.capability.high_tech_exports |
TEC | Technology capability | adaptive capacity | % |
COUNTRY | WB_WDI TX.VAL.TECH.MF.ZS SDG 9.b.1 |
Concentration des fournisseurs de semi-conducteurs importésIND.TEC.concentration.semiconductor_import_concentration |
TEC | Concentration and dependence | vulnerability | 1 |
COUNTRY | |
Concentration des fournisseurs d'infrastructure cloudIND.TEC.concentration.cloud_provider_concentration |
TEC | Concentration and dependence | vulnerability | 1 |
COUNTRY | |
Capacité de calcul pour l'IA sous contrôle étranger ou d'un fournisseur uniqueIND.TEC.ai.ai_compute_foreign_control |
TEC | Intelligence artificielle | vulnerability | % |
COUNTRY | |
Concentration des fournisseurs de modèles de fondationIND.TEC.ai.foundation_model_concentration |
TEC | Intelligence artificielle | vulnerability | % |
COUNTRY | |
Supervision de la biosûreté et de la biosécurité des laboratoires de haut confinementIND.TEC.bio.biosecurity_lab_oversight |
TEC | Biotechnologie | coping capacity | {score} |
COUNTRY | |
Population à moins de 15 minutes des services d'urgenceIND.CRS.response.emergency_service_access |
CRS | Response capacity | coping capacity | % |
COUNTRY, ADM1, CITY | ISO_37120 ISO 37120:2018 |
Hazard families this series reads
families, each crosswalked to the UNDRR–ISC Hazard Information Profiles (2025) where a profile exists.
| Famille | Domaine | Aléas | Count |
|---|---|---|---|
| Malicious compromise | Systèmes d'information et cyberphysiques | Malware outbreak, Ransomware attack, Data breach, Persistent intrusion, Denial-of-service attack, Software or hardware supply-chain compromise, Social-engineering campaign, Online harassment campaign … | 9 |
| Information-integrity attacks | Systèmes d'information et cyberphysiques | Disinformation campaign, Data and model integrity attack, Election infrastructure attack, Public record tampering, Misinformation surge and infodemic, Hazardous information disclosure | 6 |
| Cyber-physical disruption | Systèmes d'information et cyberphysiques | Industrial control system compromise, Power-grid cyberattack, Transport control-system attack, Health-system cyberattack, Medical device compromise, Water utility cyberattack, Building systems compromise, Mass connected-device manipulation … | 11 |
| Signal and platform disruption | Systèmes d'information et cyberphysiques | Satellite-navigation disruption, Major cloud or platform outage, Internet routing or naming failure, Subsea cable damage, Payment system outage, Radio-spectrum interference, Digital public infrastructure failure | 7 |
| Identity, trust and cryptographic failure | Systèmes d'information et cyberphysiques | Identity provider compromise, Signing key or certificate compromise, Certificate or credential expiry outage, Cryptographic algorithm or implementation break, Mass account takeover, National digital identity system failure | 6 |
| Systemic cyber events | Systèmes d'information et cyberphysiques | Defective update mass outage, Mass vulnerability exploitation, Connected-device botnet, Managed service provider compromise, Firmware or hardware backdoor, Insider threat, Cyber theft from financial infrastructure, Irrecoverable data loss … | 9 |
| Structural and civil failure | Systèmes bâtis | Building collapse, Facade and cladding failure, Non-building structure failure, Bridge failure, Tunnel failure, Dam failure, Levee breach, Pipeline rupture | 8 |
| Utility and communication network outage | Systèmes bâtis | Widespread power outage, Water supply failure, Sewer and drain failure, Gas supply network failure, Telecommunications outage, Emergency communications failure | 6 |
| Transport accidents | Systèmes bâtis | Air transport accident, Maritime accident, Inland waterway accident, Rail accident, Road crash | 5 |
| Industrial and process accidents | Systèmes bâtis | Industrial explosion, Reactive chemical store explosion, Industrial fire, Building and urban fire, Explosives accident, Mine accident, Oil and gas extraction accident, Battery thermal runaway fire … | 15 |
| Energy system instability and shortfall | Systèmes bâtis | Low-inertia grid instability, System frequency collapse, Voltage collapse, Mass inverter disconnection, Grid power oscillation, Generation adequacy shortfall, Low wind and solar energy drought, Drought-driven hydropower shortfall … | 22 |
| Water and wastewater system failure | Systèmes bâtis | Wastewater treatment plant failure, Distribution network contamination intrusion, Water treatment dosing error, Prolonged drinking-water advisory, Desalination plant outage, Raw-water intake loss, Chronic distribution leakage, Intermittent piped supply … | 9 |
| Telecom and data-centre failure | Systèmes bâtis | Data-centre outage, Data-centre fire, Mobile or fixed core network failure, Terrestrial fibre backbone cut, Internet exchange or landing hub failure, Time and synchronisation failure, Telecom backup power exhaustion, Broadcast transmission loss | 8 |
| Space-based service loss | Systèmes bâtis | Navigation satellite system fault, Satellite communications outage, Weather and Earth-observation satellite gap, Satellite ground segment failure | 4 |
| Seabed infrastructure damage | Systèmes bâtis | Subsea pipeline damage, Subsea power cable damage, Covert seabed infrastructure sabotage | 3 |
| Transport network disruption | Systèmes bâtis | Air traffic management failure, Large-scale airspace closure, Rail network outage, Heat-induced track buckling, Strategic road network closure, Low-water navigation restriction, Navigation lock or canal structure failure, Dangerous goods transport accident … | 12 |
| Food system infrastructure failure | Systèmes bâtis | Food storage loss, Irrigation system failure, Food processing bottleneck, Strategic food reserve depletion, Loss of energy for food production | 5 |
| Urban and building-stock stress | Systèmes bâtis | Building overheating, Seismically and structurally vulnerable stock, Defective building material in use, Construction and temporary works collapse, Tunnelling and excavation ground damage, High-rise evacuation failure | 6 |
| Ageing and degraded infrastructure | Systèmes bâtis | Infrastructure deterioration, Deferred maintenance backlog, Reinforced concrete deterioration, Metal fatigue cracking, Ageing dam and reservoir stock, Legacy technology obsolescence, Infrastructure skills shortage | 7 |
Method libraries
Each method has a reference implementation or declares the specialist model, data or adapter it still needs; none is promoted beyond its evidence.
Infrastructures critiques et systèmes industriels
Asset Reliability · Process Safety · HAZOP · FMEA FMECA · Industrial Fault Tree · Industrial Event Tree · LOPA …
Cyber, IA et technologies de pointe
Cyber Attack Surface · Exploitability · Threat Likelihood · Cyber Asset Criticality · Intrusion Propagation · Ransomware Risk · Identity Compromise …
Who uses it
Governments and national risk agencies
Prioritise prevention and preparedness. Plan with subnational layers. Track Sendai targets. Co-develop a national index.
Companies and supply chains
Screen sites and suppliers. Watch chokepoints and pulse. Read country context.
Insurers, reinsurers and risk pools
Read hazard, exposure and protection-gap context. Run scenario and tail analytics. Study parametric index design questions.
Rapports Nexus
- Edition code
XT-09- Edition status
- prévue
- Objet
- Set by Nexus Reports at commissioning
Citer et réutiliser
- Series key
grix:SER.XT-09:{ISO3}:{YEAR}:A- Domain keys
nis:IDX.INF.disruption.infrastructure_fragility:{ISO3}:{YEAR}:Anis:IDX.CYB.capability.cyber_risk:{ISO3}:{YEAR}:Anis:IDX.TEC.concentration.technology_concentration_risk:{ISO3}:{YEAR}:A
Every country reads this series
Each country profile carries the domain indices this series is built from.
Statut
La méthodologie, la structure et les définitions de The Global Risks Index constituent un projet de travail préparatoire (2026), diffusé pour examen et commentaires et non pour mise en œuvre. Aucune valeur n'apparaît avant la publication d'une édition à partir d'une coupe de données probantes encadrée ; les valeurs comportent alors des intervalles, des classes, des sources et leur voie de correction. Les simulateurs appliquent les méthodes publiées à des nombres que vous choisissez et n'affichent jamais de valeur NXS-GRX.
Ce que NXS-GRX n'est pas
NXS-GRX est une information de recherche et d'analyse des risques. Ce n'est pas une notation de crédit ou ESG et il n'utilise aucune échelle de notation ; ce n'est pas un indice de référence pour des instruments financiers, ni une statistique officielle, ni une alerte d'urgence ou une classification officielle, ni un conseil. Il ne doit pas servir à évaluer des personnes physiques. Les classes de risque sont des bandes sur une échelle publiée, jamais des classements de pays ou de personnes.
Institutions et sources
The Nexus Consortium is stewarded by three independent not-for-profit institutions: The Global Centre for Risk and Innovation (GCRI), through GCRI US in Washington, DC and GCRI Canada in Ontario, with GCRI Canada as Lead Institution, Consortium Secretariat and lead contracting organisation; The Global Risks Forum (GRF); and The Global Risks Alliance (GRA). Technology, infrastructure and service providers work with the Consortium at arm’s length under written agreements, like every other external party in the public-private-planet model, and hold no role in its stewardship.
Chaque valeur porte l'attribution de ses sources, qui conservent leurs propres licences. Les noms externes ne sont cités qu'à des fins d'interopérabilité. Les textes rédigés par Nexus sont destinés à être publiés sous licence CC BY 4.0.
Avis en français
La méthodologie et les définitions du NXS-GRX sont un projet de travail préparatoire (2026). Le NXS-GRX est une information de recherche et d’analyse des risques : ni notation, ni indice de référence financier, ni statistique officielle, ni alerte, ni conseil. Les classes de risque sont des bandes sur une échelle publiée, non des classements.