The Global Risks Index · GRX-IDX-CYB · MSF Macro-financial and structural fragility
サイバーリスク指数
Index of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
Page GRX-IDX-CYBEdition Baseline Edition 2026Evidence close 2026-09-30Indicator Standard IDX.CYB.capability.cyber_riskValues not yet publishedMethod v1.0.0-draft
FIG 1 · Method card
Aggregation
geometric
equal weights · floor 0.1 where geometric
不確実性
1,000 draws
normalisation, weights, aggregation, imputation
構成
3 components
12 leaf indicators
対象範囲
67% minimum
modelled share ≤ 40%
12
leaf indicators
3
components
1,000
Monte Carlo draws
15
series read it
01Construction
From indicators to the composite
Combines hazard, exposure and capability in the INFORM pattern so that a highly digital, well-defended economy and a lightly digital, undefended one are not confused.
computation
How Cyber risk is computedGraph18 nodes
グラフ
01指標
02Sub-indices
03Domain index
04柱
05総合
100%
索引
- 人口 100 万人あたりの重大なサイバー・インシデントIndicator · IND · /10*6/aNumber of cyber incidents in the year that a national CERT or regulator classifies as significant (material service disruption, data compromise or financial loss), per million population.
- 重要サービスを途絶させるサイバー・インシデントIndicator · IND · 1Number of cyber incidents in the year that disrupted an essential service (energy, water, health, transport, finance, digital infrastructure), counted from mandatory incident reports and verified public disclosure.
- インターネット利用者Indicator · IND · %Share of individuals who used the Internet from any location and device in the last three months.
- ICT サービスの付加価値（GDP 比）Indicator · IND · %Gross value added of telecommunications, computer programming and information services (ISIC Rev.4 divisions 61–63) as a percentage of GDP.
- 電子政府の発展度Indicator · IND · scoreUN E-Government Development Index (0–1), combining online-service provision, telecommunication infrastructure and human capital, carried as an external source series.
- ITU GCI 法的措置の柱Indicator · IND · scoreITU GCI 2024 pillar score (0–20) for laws and regulations on cybercrime, cybersecurity, data protection and critical-infrastructure protection.
- ITU GCI 技術的措置の柱Indicator · IND · scoreITU GCI 2024 pillar score (0–20) for national and sectoral incident response teams, technical frameworks and protection of critical systems.
- ITU GCI 組織的措置の柱Indicator · IND · scoreITU GCI 2024 pillar score (0–20) for national strategy, a responsible agency, and metrics for cybersecurity governance.
- ITU GCI 能力開発措置の柱Indicator · IND · scoreITU GCI 2024 pillar score (0–20) for awareness campaigns, curricula, professional training and research and industry development.
- ITU GCI 協力措置の柱Indicator · IND · scoreITU GCI 2024 pillar score (0–20) for bilateral, multilateral and public-private cooperation agreements and information-sharing arrangements.
- 国のコンピュータ・インシデント対応チームの運用Indicator · IND · yes or noWhether the economy has a government-mandated national computer emergency or security incident response team that is operational and reachable by constituents (1 yes, 0 no).
- データ保護・プライバシー法の施行Indicator · IND · yes or noWhether a general data protection and privacy law is in force in the economy (1 yes, 0 no; draft legislation counts as 0).
- Cyber incident pressure sub-indexSub-index · SUB · w 1 · 33.3%Composite of the significant-incident rate and critical-service incidents.
- Digital dependence sub-indexSub-index · SUB · w 1 · 33.3%Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
- Cyber capability sub-indexSub-index · SUB · w 1 · 33.3%Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
- サイバーリスク指数Domain index · IDX · geometricIndex of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
- マクロ金融と構造の脆弱性Pillar · PILLAR · 5 indicesHow much fiscal, financial, external, digital and technological room does the system have before stress turns into crisis?
- NXS-GRX (canonical data, provenance and risk) Composite RiskComposite · COMPOSITE · four pillarsComposite = (HTE × VUL × MSF × LCC)^(1/4), each pillar on 0–10 floored at 0.1; pillar = expert-weighted geometric mean of its domain indices
未実行進行中完了
02Simulator
Run this index’s own aggregation
Set each component, change the aggregation or the weight uncertainty, and watch the interval, the class probability and each component’s contribution respond.
FIG 3 · Simulator: aggregate cyber risk on your numbers
Components (0 to 10)
–
ブラウザで動作
Contribution of each component (leave one out)
03手法
Treatment, normalisation, weighting, aggregation, uncertainty
- Treatment
- WINSORISE
- Outlier rule
- |skew| > 2, kurtosis > 3.5
- Normalisation
- INFORM 0–10 rescaling
- Imputation
- NONE
- Coverage minimum
- 67% of components
- Modelled share cap
- 40% of weight
- Weighting
- equal
- Aggregation
- geometric
- Scale
- 0 to 10
- 不確実性
- 1,000 Monte Carlo runs over normalisation, weights, aggregation, imputation
- Framework basis
- INFORM risk algebra (hazard, exposure, lack of coping capacity); OECD/JRC Handbook (2008); ITU GCI 2024 (capability input)
非常に低い0.0〜< 2.0
低い2.0〜< 3.5
中程度3.5〜< 5.0
高い5.0〜< 6.5
非常に高い6.5 から 10.0
04Components
3 components, 12 indicators
Cyber incident pressure sub-index w 1
Composite of the significant-incident rate and critical-service incidents.
| 指標 | 単位 | エビデンス | 出典 | 割合 |
|---|---|---|---|---|
人口 100 万人あたりの重大なサイバー・インシデントIND.CYB.incidents.significant_incident_rate | /10*6/a | Class D | national-cert-annual-reports, enisa-threat-landscape, eu-nis2-incident-reporting, commercial-threat-telemetry-licensed | 50.0% |
重要サービスを途絶させるサイバー・インシデントIND.CYB.incidents.critical_sector_incidents | 1 | Class E | eu-nis2-incident-reporting, national-cert-annual-reports, verified-public-disclosures | 50.0% |
Digital dependence sub-index w 1
Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
| 指標 | 単位 | エビデンス | 出典 | 割合 |
|---|---|---|---|---|
インターネット利用者IND.INF.digital.internet_users | % | Class B | itu-datahub, wb-wdi, national-ict-household-surveys | 33.3% |
ICT サービスの付加価値（GDP 比）IND.CYB.dependence.ict_services_share.gdp | % | Class B | un-national-accounts-main-aggregates, oecd-stan, unctad-digital-economy | 33.3% |
電子政府の発展度IND.CYB.dependence.egovernment_development | {score} | Class C | un-desa-egovernment-survey | 33.3% |
Cyber capability sub-index w 1
Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
| 指標 | 単位 | エビデンス | 出典 | 割合 |
|---|---|---|---|---|
ITU GCI 法的措置の柱IND.CYB.capability.gci_legal | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI 技術的措置の柱IND.CYB.capability.gci_technical | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI 組織的措置の柱IND.CYB.capability.gci_organizational | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI 能力開発措置の柱IND.CYB.capability.gci_capacity_development | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI 協力措置の柱IND.CYB.capability.gci_cooperation | {score} | Class C | itu-gci-2024 | 16.7% |
国のコンピュータ・インシデント対応チームの運用IND.CYB.capability.national_cert | {bool} | Class B | itu-national-cirt-list, first-member-directory, itu-gci-2024 | 8.3% |
データ保護・プライバシー法の施行IND.CYB.capability.data_protection_law | {bool} | Class B | unctad-global-cyberlaw-tracker, national-legal-gazettes | 8.3% |
05分野
サイバーとデジタル
Cyber-security commitment and capability, digital dependence and incident exposure.
| Sub-domain | 指標 |
|---|---|
| Cyber capability | 9 |
| Incidents | 2 |
| Digital dependence | 2 |
Anchor frameworks (pillar structure and definitions only): ITU GCI 2024; Basel operational-risk event types.
06指標
All 13 cyber and digital indicators
FIG 4 · Indicators in scope, by domain and sub-domain
| 指標 | 分野 | Sub-domain | 構成要素 | 単位 | レベル | Crosswalks |
|---|---|---|---|---|---|---|
ITU グローバル・サイバーセキュリティ指数スコアIND.CYB.capability.gci_score | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Overall score |
ITU グローバル・サイバーセキュリティ指数の階層IND.CYB.capability.gci_tier | CYB | Cyber capability | vulnerability | {class} | COUNTRY | ITU_GCI Tier |
ITU GCI 法的措置の柱IND.CYB.capability.gci_legal | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Legal Measures |
ITU GCI 技術的措置の柱IND.CYB.capability.gci_technical | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Technical Measures |
ITU GCI 組織的措置の柱IND.CYB.capability.gci_organizational | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Organizational Measures |
ITU GCI 能力開発措置の柱IND.CYB.capability.gci_capacity_development | CYB | Cyber capability | adaptive capacity | {score} | COUNTRY | ITU_GCI Capacity Development Measures |
ITU GCI 協力措置の柱IND.CYB.capability.gci_cooperation | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Cooperation Measures |
国のコンピュータ・インシデント対応チームの運用IND.CYB.capability.national_cert | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Technical Measures |
データ保護・プライバシー法の施行IND.CYB.capability.data_protection_law | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Legal Measures |
人口 100 万人あたりの重大なサイバー・インシデントIND.CYB.incidents.significant_incident_rate | CYB | Incidents | hazard | /10*6/a | COUNTRY | |
重要サービスを途絶させるサイバー・インシデントIND.CYB.incidents.critical_sector_incidents | CYB | Incidents | impact | 1 | COUNTRY | |
ICT サービスの付加価値（GDP 比）IND.CYB.dependence.ict_services_share.gdp | CYB | Digital dependence | exposure | % | COUNTRY | WB_WDI BX.GSR.CCIS.ZS |
電子政府の発展度IND.CYB.dependence.egovernment_development | CYB | Digital dependence | exposure | {score} | COUNTRY |
07引用
Cyber risk index, world
The world reading of this index, every country as a tile and the largest movements since the previous edition.
NXS-GRX · CYB · 195 profiles · 0–10 scale
Cyber risk index, world
–
値は版とともに公開され、区間、区分、変化がここに表示されます。
- 前回の版
- –
- Range since 2016
- –
- 結合総合
- –
- 結合スコア S
- –
- パルス、直近 1 週間
- –
- Outlook, 12 months
- –
- 手法
- Indicator Standard 1.0 · NXS-GRX 2026
- 抽出
- 1,000
Cyber risk index, world, by edition
公開済みの値はまだありません。最初の版で、区間の帯と区分の境界とともに履歴がここに描かれます。
アフリカ54
南北アメリカ35
アジア48
ヨーロッパ44
変動はまだありません。 前版からの変化は、第 2 版以降、その要因となった指標とともにここに掲載されます。
08値
Country values
FIG 5 · Cyber risk index: countries (values when released)
地図を読み込み中
Equal Earth · Natural Earth 1:110mValues when released
- タイル
/api/v1/public/grix/risk-products/tiles/cyb/{z}/{x}/{y}.mvt- 観測キー
nis:IDX.CYB.capability.cyber_risk:{ISO3}:{YEAR}:A
09シリーズ
Series that read this index
GLBGlobal SystemsThe state of interdependent global risk: the twenty domain indices aggregated to the world, the five core systems (water, energy, food, health, biodiversity) and their couplings, the global tail register and the gap between perceived and measured risk.→ GS-13Global Cyber and digitalCyber capability and threat exposure, digital dependency, connectivity resilience and the cyber-physical channels into essential services.→ SR-10Digital public infrastructureIdentity, payments and data-exchange infrastructure as public goods, and their concentration, cyber and continuity risk.→ SR-11Information integrity and social cohesionInformation disorder, polarisation, trust and cohesion as amplifiers of every other risk.→ XT-01Artificial Intelligence and Agentic SystemsAI and agentic systems as physical infrastructure (compute, energy, water, materials and supply chains) and as a hazard source: failure, misuse, concentration and oversight gaps.→ XT-02Cyber and cyber-physical systemsThreats to operational technology, industrial control and cyber-physical systems across energy, water, health, ports and logistics.→ XT-03Telecommunications, open radio networks and edgeTelecom resilience, open and AI-native radio access networks, private wireless, edge compute and spectrum constraints.→ XT-05Quantum-relevant securityCryptographic resilience and the migration to post-quantum cryptography across public and financial systems.→ XT-09Sensors, IoT and industrial IoTConnected sensing and control across cities, utilities and industry: attack surface, data integrity and dependency.→ XT-11Digital identity and trustIdentity, authentication and trust infrastructure: exclusion, fraud, breach and concentration risk.→ XT-12Positioning, navigation and timingDependency of power, telecom, finance and transport on positioning and timing signals; jamming, spoofing and space weather.→ XT-14Software and supply-chain integrityOpen-source and commercial software dependencies, build integrity and provenance across critical systems.→ XT-16Advanced manufacturingAdvanced and additive manufacturing, industrial automation and their supply, cyber and labour risks.→ XT-17Distributed ledgers and decentralised infrastructureDistributed ledgers and decentralised physical infrastructure networks: operational, financial-stability and governance risk.→ XT-20Converging technologiesRisks that emerge where frontier technologies combine (AI with biotechnology, autonomy with cyber, compute with energy) and outrun single-technology governance.→
10Validity
Crosswalks and validity checks
Crosswalks map leaf indicators to source code lists; established indices are used for validity checks, never re-weighted as inputs.
| Code system | Leaf indicators mapped |
|---|---|
ITU_GCI | 7 |
WB_WDI | 2 |
SDG | 1 |
11Nexus 全体で
Platforms, standards and ways to take part
Field and service platforms of GCRI, GRF and GRA, the Nexus Risk Standards for this domain, learning, working groups and open calls. Every link is a live page.
12引用
引用と再利用
GCRI Canada (2026). The Global Risks Index (NXS-GRX): Cyber risk index (GRX-IDX-CYB), Baseline Edition 2026. Preparatory working draft. https://risksindex.com/indices/cyber-risk/ UNI NXS-GRX-AR-000116.
See this index in every country profile
Each profile shows this index with its interval and class once released.
ステータス
The Global Risks Index の手法、構造、定義は準備段階の作業草案（2026 年）であり、レビューと意見募集のために配布されているもので、実施を目的としたものではありません。管理されたエビデンスの区切りから版が公表されるまで、値は一切表示されません。公表後の値には、区間、区分、出典、訂正の経路が付されます。シミュレーターは、公表された手法をあなたが選んだ数値で実行するものであり、NXS-GRX の値を表示することはありません。
NXS-GRX ではないもの
NXS-GRX は研究およびリスク分析の情報です。信用格付や ESG 格付ではなく、格付尺度を用いず、金融商品のベンチマークでも、公的統計でも、緊急警報や公式分類でも、助言でもありません。自然人の評価に用いてはなりません。リスククラスは公開された尺度上の区分であり、国や人の順位付けではありません。
機関と情報源
The Nexus Consortium is stewarded by three independent not-for-profit institutions: The Global Centre for Risk and Innovation (GCRI), through GCRI US in Washington, DC and GCRI Canada in Ontario, with GCRI Canada as Lead Institution, Consortium Secretariat and lead contracting organisation; The Global Risks Forum (GRF); and The Global Risks Alliance (GRA). Technology, infrastructure and service providers work with the Consortium at arm’s length under written agreements, like every other external party in the public-private-planet model, and hold no role in its stewardship.
すべての値には情報源の帰属表示が付され、情報源はそれぞれ独自のライセンスを保持します。外部の名称は相互運用性のためにのみ引用しています。Nexus が執筆したテキストは、公開時に CC BY 4.0 とする予定です。
Avis en français
La méthodologie et les définitions du NXS-GRX sont un projet de travail préparatoire (2026). Le NXS-GRX est une information de recherche et d’analyse des risques : ni notation, ni indice de référence financier, ni statistique officielle, ni alerte, ni conseil. Les classes de risque sont des bandes sur une échelle publiée, non des classements.