Índice de risco cibernético
Index of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
geometric
equal weights · floor 0.1 where geometric
1,000 draws
normalisation, weights, aggregation, imputation
3 components
12 leaf indicators
67% minimum
modelled share ≤ 40%
From indicators to the composite
Combines hazard, exposure and capability in the INFORM pattern so that a highly digital, well-defended economy and a lightly digital, undefended one are not confused.
- Incidentes cibernéticos significativos por milhão de habitantesIndicator · IND · /10*6/aNumber of cyber incidents in the year that a national CERT or regulator classifies as significant (material service disruption, data compromise or financial loss), per million population.
- Incidentes cibernéticos que interrompem serviços críticosIndicator · IND · 1Number of cyber incidents in the year that disrupted an essential service (energy, water, health, transport, finance, digital infrastructure), counted from mandatory incident reports and verified public disclosure.
- Pessoas que usam a internetIndicator · IND · %Share of individuals who used the Internet from any location and device in the last three months.
- Valor agregado dos serviços de TIC, em % do PIBIndicator · IND · %Gross value added of telecommunications, computer programming and information services (ISIC Rev.4 divisions 61–63) as a percentage of GDP.
- Desenvolvimento do governo eletrônicoIndicator · IND · scoreUN E-Government Development Index (0–1), combining online-service provision, telecommunication infrastructure and human capital, carried as an external source series.
- Pilar de medidas jurídicas do GCI da UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for laws and regulations on cybercrime, cybersecurity, data protection and critical-infrastructure protection.
- Pilar de medidas técnicas do GCI da UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national and sectoral incident response teams, technical frameworks and protection of critical systems.
- Pilar de medidas organizacionais do GCI da UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national strategy, a responsible agency, and metrics for cybersecurity governance.
- Pilar de medidas de desenvolvimento de capacidades do GCI da UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for awareness campaigns, curricula, professional training and research and industry development.
- Pilar de medidas de cooperação do GCI da UITIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for bilateral, multilateral and public-private cooperation agreements and information-sharing arrangements.
- Equipe nacional de resposta a incidentes de computador em operaçãoIndicator · IND · yes or noWhether the economy has a government-mandated national computer emergency or security incident response team that is operational and reachable by constituents (1 yes, 0 no).
- Legislação de proteção de dados e privacidade em vigorIndicator · IND · yes or noWhether a general data protection and privacy law is in force in the economy (1 yes, 0 no; draft legislation counts as 0).
- Cyber incident pressure sub-indexSub-index · SUB · w 1 · 33.3%Composite of the significant-incident rate and critical-service incidents.
- Digital dependence sub-indexSub-index · SUB · w 1 · 33.3%Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
- Cyber capability sub-indexSub-index · SUB · w 1 · 33.3%Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
- Índice de risco cibernéticoDomain index · IDX · geometricIndex of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
- Fragilidade macrofinanceira e estruturalPillar · PILLAR · 5 indicesHow much fiscal, financial, external, digital and technological room does the system have before stress turns into crisis?
- NXS-GRX (canonical data, provenance and risk) Composite RiskComposite · COMPOSITE · four pillarsComposite = (HTE × VUL × MSF × LCC)^(1/4), each pillar on 0–10 floored at 0.1; pillar = expert-weighted geometric mean of its domain indices
Run this index’s own aggregation
Set each component, change the aggregation or the weight uncertainty, and watch the interval, the class probability and each component’s contribution respond.
Treatment, normalisation, weighting, aggregation, uncertainty
- Treatment
- WINSORISE
- Outlier rule
- |skew| > 2, kurtosis > 3.5
- Normalisation
- INFORM 0–10 rescaling
- Imputation
- NONE
- Coverage minimum
- 67% of components
- Modelled share cap
- 40% of weight
- Weighting
- equal
- Aggregation
- geometric
- Scale
- 0 to 10
- Incerteza
- 1,000 Monte Carlo runs over normalisation, weights, aggregation, imputation
- Framework basis
- INFORM risk algebra (hazard, exposure, lack of coping capacity); OECD/JRC Handbook (2008); ITU GCI 2024 (capability input)
3 components, 12 indicators
Cyber incident pressure sub-index w 1
Composite of the significant-incident rate and critical-service incidents.
| Indicador | Unidade | Evidências | Fontes | Parcela |
|---|---|---|---|---|
Incidentes cibernéticos significativos por milhão de habitantesIND.CYB.incidents.significant_incident_rate | /10*6/a | Class D | national-cert-annual-reports, enisa-threat-landscape, eu-nis2-incident-reporting, commercial-threat-telemetry-licensed | 50.0% |
Incidentes cibernéticos que interrompem serviços críticosIND.CYB.incidents.critical_sector_incidents | 1 | Class E | eu-nis2-incident-reporting, national-cert-annual-reports, verified-public-disclosures | 50.0% |
Digital dependence sub-index w 1
Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
| Indicador | Unidade | Evidências | Fontes | Parcela |
|---|---|---|---|---|
Pessoas que usam a internetIND.INF.digital.internet_users | % | Class B | itu-datahub, wb-wdi, national-ict-household-surveys | 33.3% |
Valor agregado dos serviços de TIC, em % do PIBIND.CYB.dependence.ict_services_share.gdp | % | Class B | un-national-accounts-main-aggregates, oecd-stan, unctad-digital-economy | 33.3% |
Desenvolvimento do governo eletrônicoIND.CYB.dependence.egovernment_development | {score} | Class C | un-desa-egovernment-survey | 33.3% |
Cyber capability sub-index w 1
Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
| Indicador | Unidade | Evidências | Fontes | Parcela |
|---|---|---|---|---|
Pilar de medidas jurídicas do GCI da UITIND.CYB.capability.gci_legal | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas técnicas do GCI da UITIND.CYB.capability.gci_technical | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas organizacionais do GCI da UITIND.CYB.capability.gci_organizational | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas de desenvolvimento de capacidades do GCI da UITIND.CYB.capability.gci_capacity_development | {score} | Class C | itu-gci-2024 | 16.7% |
Pilar de medidas de cooperação do GCI da UITIND.CYB.capability.gci_cooperation | {score} | Class C | itu-gci-2024 | 16.7% |
Equipe nacional de resposta a incidentes de computador em operaçãoIND.CYB.capability.national_cert | {bool} | Class B | itu-national-cirt-list, first-member-directory, itu-gci-2024 | 8.3% |
Legislação de proteção de dados e privacidade em vigorIND.CYB.capability.data_protection_law | {bool} | Class B | unctad-global-cyberlaw-tracker, national-legal-gazettes | 8.3% |
Cibernético e digital
Cyber-security commitment and capability, digital dependence and incident exposure.
| Sub-domain | Indicadores |
|---|---|
| Cyber capability | 9 |
| Incidents | 2 |
| Digital dependence | 2 |
Anchor frameworks (pillar structure and definitions only): ITU GCI 2024; Basel operational-risk event types.
All 13 cyber and digital indicators
| Indicador | Domínio | Sub-domain | Componente | Unidade | Níveis | Crosswalks |
|---|---|---|---|---|---|---|
Pontuação no Global Cybersecurity Index da UITIND.CYB.capability.gci_score | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Overall score |
Nível no Global Cybersecurity Index da UITIND.CYB.capability.gci_tier | CYB | Cyber capability | vulnerability | {class} | COUNTRY | ITU_GCI Tier |
Pilar de medidas jurídicas do GCI da UITIND.CYB.capability.gci_legal | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Legal Measures |
Pilar de medidas técnicas do GCI da UITIND.CYB.capability.gci_technical | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Technical Measures |
Pilar de medidas organizacionais do GCI da UITIND.CYB.capability.gci_organizational | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Organizational Measures |
Pilar de medidas de desenvolvimento de capacidades do GCI da UITIND.CYB.capability.gci_capacity_development | CYB | Cyber capability | adaptive capacity | {score} | COUNTRY | ITU_GCI Capacity Development Measures |
Pilar de medidas de cooperação do GCI da UITIND.CYB.capability.gci_cooperation | CYB | Cyber capability | coping capacity | {score} | COUNTRY | ITU_GCI Cooperation Measures |
Equipe nacional de resposta a incidentes de computador em operaçãoIND.CYB.capability.national_cert | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Technical Measures |
Legislação de proteção de dados e privacidade em vigorIND.CYB.capability.data_protection_law | CYB | Cyber capability | coping capacity | {bool} | COUNTRY | ITU_GCI Legal Measures |
Incidentes cibernéticos significativos por milhão de habitantesIND.CYB.incidents.significant_incident_rate | CYB | Incidents | hazard | /10*6/a | COUNTRY | |
Incidentes cibernéticos que interrompem serviços críticosIND.CYB.incidents.critical_sector_incidents | CYB | Incidents | impact | 1 | COUNTRY | |
Valor agregado dos serviços de TIC, em % do PIBIND.CYB.dependence.ict_services_share.gdp | CYB | Digital dependence | exposure | % | COUNTRY | WB_WDI BX.GSR.CCIS.ZS |
Desenvolvimento do governo eletrônicoIND.CYB.dependence.egovernment_development | CYB | Digital dependence | exposure | {score} | COUNTRY |
Cyber risk index, world
The world reading of this index, every country as a tile and the largest movements since the previous edition.
- Edição anterior
- –
- Range since 2016
- –
- Composto acoplado
- –
- Pontuação de acoplamento S
- –
- Pulse, última semana
- –
- Outlook, 12 months
- –
- Método
- Indicator Standard 1.0 · NXS-GRX 2026
- Sorteios
- 1,000
Ainda não há valores publicados. A primeira edição traça aqui o histórico com a faixa do intervalo e os limites de classe.
Country values
- Blocos
/api/v1/public/grix/risk-products/tiles/cyb/{z}/{x}/{y}.mvt- Chave de observação
nis:IDX.CYB.capability.cyber_risk:{ISO3}:{YEAR}:A
Series that read this index
Crosswalks and validity checks
Crosswalks map leaf indicators to source code lists; established indices are used for validity checks, never re-weighted as inputs.
| Code system | Leaf indicators mapped |
|---|---|
ITU_GCI | 7 |
WB_WDI | 2 |
SDG | 1 |
Platforms, standards and ways to take part
Field and service platforms of GCRI, GRF and GRA, the Nexus Risk Standards for this domain, learning, working groups and open calls. Every link is a live page.
Citar e reutilizar
See this index in every country profile
Each profile shows this index with its interval and class once released.
Situação
A metodologia, a estrutura e as definições do The Global Risks Index constituem um projeto de trabalho preparatório (2026), divulgado para revisão e comentários e não para implementação. Nenhum valor aparece até que uma edição seja publicada a partir de um corte de evidências governado; os valores passam então a ter intervalos, classes, fontes e o respectivo percurso de correção. Os simuladores executam os métodos publicados sobre números que você escolhe e nunca mostram um valor do NXS-GRX.
O que o NXS-GRX não é
O NXS-GRX é informação de pesquisa e de análise de risco. Não é rating de crédito ou ESG e não usa escala de rating, não é referência para instrumentos financeiros, não é estatística oficial, não é alerta de emergência nem classificação oficial e não é aconselhamento. Não deve ser usado para avaliar pessoas físicas. As classes de risco são faixas em uma escala publicada, nunca classificações de países ou pessoas.
Instituições e fontes
The Nexus Consortium is stewarded by three independent not-for-profit institutions: The Global Centre for Risk and Innovation (GCRI), through GCRI US in Washington, DC and GCRI Canada in Ontario, with GCRI Canada as Lead Institution, Consortium Secretariat and lead contracting organisation; The Global Risks Forum (GRF); and The Global Risks Alliance (GRA). Technology, infrastructure and service providers work with the Consortium at arm’s length under written agreements, like every other external party in the public-private-planet model, and hold no role in its stewardship.
Cada valor inclui a atribuição das suas fontes, que mantêm as suas próprias licenças. Os nomes externos são citados apenas para fins de interoperabilidade. Os textos de autoria da Nexus destinam-se a ser publicados sob CC BY 4.0.
Avis en français
La méthodologie et les définitions du NXS-GRX sont un projet de travail préparatoire (2026). Le NXS-GRX est une information de recherche et d’analyse des risques : ni notation, ni indice de référence financier, ni statistique officielle, ni alerte, ni conseil. Les classes de risque sont des bandes sur une échelle publiée, non des classements.