Siber risk endeksi
Index of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
geometric
equal weights · floor 0.1 where geometric
1,000 draws
normalisation, weights, aggregation, imputation
3 components
12 leaf indicators
67% minimum
modelled share ≤ 40%
From indicators to the composite
Combines hazard, exposure and capability in the INFORM pattern so that a highly digital, well-defended economy and a lightly digital, undefended one are not confused.
- Milyon kişi başına önemli siber olaylarIndicator · IND · /10*6/aNumber of cyber incidents in the year that a national CERT or regulator classifies as significant (material service disruption, data compromise or financial loss), per million population.
- Kritik hizmetleri aksatan siber olaylarIndicator · IND · 1Number of cyber incidents in the year that disrupted an essential service (energy, water, health, transport, finance, digital infrastructure), counted from mandatory incident reports and verified public disclosure.
- İnternet kullanan bireylerIndicator · IND · %Share of individuals who used the Internet from any location and device in the last three months.
- BİT hizmetleri katma değeri, GSYH payıIndicator · IND · %Gross value added of telecommunications, computer programming and information services (ISIC Rev.4 divisions 61–63) as a percentage of GDP.
- E-devlet gelişimiIndicator · IND · scoreUN E-Government Development Index (0–1), combining online-service provision, telecommunication infrastructure and human capital, carried as an external source series.
- ITU GCI yasal önlemler sütunuIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for laws and regulations on cybercrime, cybersecurity, data protection and critical-infrastructure protection.
- ITU GCI teknik önlemler sütunuIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national and sectoral incident response teams, technical frameworks and protection of critical systems.
- ITU GCI örgütsel önlemler sütunuIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for national strategy, a responsible agency, and metrics for cybersecurity governance.
- ITU GCI kapasite geliştirme önlemleri sütunuIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for awareness campaigns, curricula, professional training and research and industry development.
- ITU GCI işbirliği önlemleri sütunuIndicator · IND · scoreITU GCI 2024 pillar score (0–20) for bilateral, multilateral and public-private cooperation agreements and information-sharing arrangements.
- Faal ulusal bilgisayar olaylarına müdahale ekibiIndicator · IND · yes or noWhether the economy has a government-mandated national computer emergency or security incident response team that is operational and reachable by constituents (1 yes, 0 no).
- Yürürlükte veri koruma ve gizlilik mevzuatıIndicator · IND · yes or noWhether a general data protection and privacy law is in force in the economy (1 yes, 0 no; draft legislation counts as 0).
- Cyber incident pressure sub-indexSub-index · SUB · w 1 · 33.3%Composite of the significant-incident rate and critical-service incidents.
- Digital dependence sub-indexSub-index · SUB · w 1 · 33.3%Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
- Cyber capability sub-indexSub-index · SUB · w 1 · 33.3%Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
- Siber risk endeksiDomain index · IDX · geometricIndex of cyber incident pressure, digital dependence and the lack of cyber capability on a 0–10 scale, higher meaning riskier.
- Makrofinansal ve yapısal kırılganlıkPillar · PILLAR · 5 indicesHow much fiscal, financial, external, digital and technological room does the system have before stress turns into crisis?
- NXS-GRX (canonical data, provenance and risk) Composite RiskComposite · COMPOSITE · four pillarsComposite = (HTE × VUL × MSF × LCC)^(1/4), each pillar on 0–10 floored at 0.1; pillar = expert-weighted geometric mean of its domain indices
Run this index’s own aggregation
Set each component, change the aggregation or the weight uncertainty, and watch the interval, the class probability and each component’s contribution respond.
Treatment, normalisation, weighting, aggregation, uncertainty
- Treatment
- WINSORISE
- Outlier rule
- |skew| > 2, kurtosis > 3.5
- Normalisation
- INFORM 0–10 rescaling
- Imputation
- NONE
- Coverage minimum
- 67% of components
- Modelled share cap
- 40% of weight
- Weighting
- equal
- Aggregation
- geometric
- Scale
- 0 to 10
- Belirsizlik
- 1,000 Monte Carlo runs over normalisation, weights, aggregation, imputation
- Framework basis
- INFORM risk algebra (hazard, exposure, lack of coping capacity); OECD/JRC Handbook (2008); ITU GCI 2024 (capability input)
3 components, 12 indicators
Cyber incident pressure sub-index w 1
Composite of the significant-incident rate and critical-service incidents.
| Gösterge | Birim | Kanıt | Kaynaklar | Pay |
|---|---|---|---|---|
Milyon kişi başına önemli siber olaylarIND.CYB.incidents.significant_incident_rate | /10*6/a | Class D | national-cert-annual-reports, enisa-threat-landscape, eu-nis2-incident-reporting, commercial-threat-telemetry-licensed | 50.0% |
Kritik hizmetleri aksatan siber olaylarIND.CYB.incidents.critical_sector_incidents | 1 | Class E | eu-nis2-incident-reporting, national-cert-annual-reports, verified-public-disclosures | 50.0% |
Digital dependence sub-index w 1
Composite of internet use, ICT services share of GDP and e-government development, read as exposure.
| Gösterge | Birim | Kanıt | Kaynaklar | Pay |
|---|---|---|---|---|
İnternet kullanan bireylerIND.INF.digital.internet_users | % | Class B | itu-datahub, wb-wdi, national-ict-household-surveys | 33.3% |
BİT hizmetleri katma değeri, GSYH payıIND.CYB.dependence.ict_services_share.gdp | % | Class B | un-national-accounts-main-aggregates, oecd-stan, unctad-digital-economy | 33.3% |
E-devlet gelişimiIND.CYB.dependence.egovernment_development | {score} | Class C | un-desa-egovernment-survey | 33.3% |
Cyber capability sub-index w 1
Composite of the five ITU GCI pillar scores, the existence of a national CERT and data-protection law in force.
| Gösterge | Birim | Kanıt | Kaynaklar | Pay |
|---|---|---|---|---|
ITU GCI yasal önlemler sütunuIND.CYB.capability.gci_legal | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI teknik önlemler sütunuIND.CYB.capability.gci_technical | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI örgütsel önlemler sütunuIND.CYB.capability.gci_organizational | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI kapasite geliştirme önlemleri sütunuIND.CYB.capability.gci_capacity_development | {score} | Class C | itu-gci-2024 | 16.7% |
ITU GCI işbirliği önlemleri sütunuIND.CYB.capability.gci_cooperation | {score} | Class C | itu-gci-2024 | 16.7% |
Faal ulusal bilgisayar olaylarına müdahale ekibiIND.CYB.capability.national_cert | {bool} | Class B | itu-national-cirt-list, first-member-directory, itu-gci-2024 | 8.3% |
Yürürlükte veri koruma ve gizlilik mevzuatıIND.CYB.capability.data_protection_law | {bool} | Class B | unctad-global-cyberlaw-tracker, national-legal-gazettes | 8.3% |
Siber ve dijital
Cyber-security commitment and capability, digital dependence and incident exposure.
| Sub-domain | Göstergeler |
|---|---|
| Cyber capability | 9 |
| Incidents | 2 |
| Digital dependence | 2 |
Anchor frameworks (pillar structure and definitions only): ITU GCI 2024; Basel operational-risk event types.
All 13 cyber and digital indicators
| Gösterge | Alan | Sub-domain | Bileşen | Birim | Düzeyler | Crosswalks |
|---|---|---|---|---|---|---|
ITU Küresel Siber Güvenlik Endeksi puanıIND.CYB.capability.gci_score | CYB | Cyber capability | başa çıkma kapasitesi | {score} | COUNTRY | ITU_GCI Overall score |
ITU Küresel Siber Güvenlik Endeksi kademesiIND.CYB.capability.gci_tier | CYB | Cyber capability | vulnerability | {class} | COUNTRY | ITU_GCI Tier |
ITU GCI yasal önlemler sütunuIND.CYB.capability.gci_legal | CYB | Cyber capability | başa çıkma kapasitesi | {score} | COUNTRY | ITU_GCI Legal Measures |
ITU GCI teknik önlemler sütunuIND.CYB.capability.gci_technical | CYB | Cyber capability | başa çıkma kapasitesi | {score} | COUNTRY | ITU_GCI Technical Measures |
ITU GCI örgütsel önlemler sütunuIND.CYB.capability.gci_organizational | CYB | Cyber capability | başa çıkma kapasitesi | {score} | COUNTRY | ITU_GCI Organizational Measures |
ITU GCI kapasite geliştirme önlemleri sütunuIND.CYB.capability.gci_capacity_development | CYB | Cyber capability | uyum kapasitesi | {score} | COUNTRY | ITU_GCI Capacity Development Measures |
ITU GCI işbirliği önlemleri sütunuIND.CYB.capability.gci_cooperation | CYB | Cyber capability | başa çıkma kapasitesi | {score} | COUNTRY | ITU_GCI Cooperation Measures |
Faal ulusal bilgisayar olaylarına müdahale ekibiIND.CYB.capability.national_cert | CYB | Cyber capability | başa çıkma kapasitesi | {bool} | COUNTRY | ITU_GCI Technical Measures |
Yürürlükte veri koruma ve gizlilik mevzuatıIND.CYB.capability.data_protection_law | CYB | Cyber capability | başa çıkma kapasitesi | {bool} | COUNTRY | ITU_GCI Legal Measures |
Milyon kişi başına önemli siber olaylarIND.CYB.incidents.significant_incident_rate | CYB | Incidents | hazard | /10*6/a | COUNTRY | |
Kritik hizmetleri aksatan siber olaylarIND.CYB.incidents.critical_sector_incidents | CYB | Incidents | impact | 1 | COUNTRY | |
BİT hizmetleri katma değeri, GSYH payıIND.CYB.dependence.ict_services_share.gdp | CYB | Digital dependence | maruziyet | % | COUNTRY | WB_WDI BX.GSR.CCIS.ZS |
E-devlet gelişimiIND.CYB.dependence.egovernment_development | CYB | Digital dependence | maruziyet | {score} | COUNTRY |
Cyber risk index, world
The world reading of this index, every country as a tile and the largest movements since the previous edition.
- Önceki baskı
- –
- Range since 2016
- –
- Bağlantılı bileşik
- –
- Bağlantı puanı S
- –
- Pulse, son hafta
- –
- Outlook, 12 months
- –
- Yöntem
- Indicator Standard 1.0 · NXS-GRX 2026
- Çekilişler
- 1,000
Henüz yayımlanmış değer yok. İlk baskı, geçmişi burada aralık bandı ve sınıf sınırlarıyla çizer.
Country values
- Döşemeler
/api/v1/public/grix/risk-products/tiles/cyb/{z}/{x}/{y}.mvt- Gözlem anahtarı
nis:IDX.CYB.capability.cyber_risk:{ISO3}:{YEAR}:A
Series that read this index
Crosswalks and validity checks
Crosswalks map leaf indicators to source code lists; established indices are used for validity checks, never re-weighted as inputs.
| Code system | Leaf indicators mapped |
|---|---|
ITU_GCI | 7 |
WB_WDI | 2 |
SDG | 1 |
Platforms, standards and ways to take part
Field and service platforms of GCRI, GRF and GRA, the Nexus Risk Standards for this domain, learning, working groups and open calls. Every link is a live page.
Atıf ve yeniden kullanım
See this index in every country profile
Each profile shows this index with its interval and class once released.
Durum
The Global Risks Index’in metodolojisi, yapısı ve tanımları, uygulama için değil, inceleme ve yorum için dolaşıma sunulmuş hazırlık niteliğinde bir çalışma taslağıdır (2026). Bir sürüm yönetilen bir kanıt kesitinden yayımlanana kadar hiçbir değer görünmez; değerler o zaman aralıkları, sınıfları, kaynakları ve düzeltme yollarını taşır. Simülatörler yayımlanan yöntemleri sizin seçtiğiniz sayılarla çalıştırır ve asla bir NXS-GRX değeri göstermez.
NXS-GRX ne değildir
NXS-GRX bir araştırma ve risk analitiği bilgisidir. Kredi ya da ESG derecelendirmesi değildir ve derecelendirme ölçeği kullanmaz; finansal araçlar için gösterge, resmî istatistik, acil durum uyarısı ya da resmî sınıflandırma ve tavsiye değildir. Gerçek kişileri değerlendirmek için kullanılmamalıdır. Risk sınıfları yayımlanmış bir ölçek üzerindeki bantlardır, asla ülkelerin ya da kişilerin sıralaması değildir.
Kurumlar ve kaynaklar
The Nexus Consortium is stewarded by three independent not-for-profit institutions: The Global Centre for Risk and Innovation (GCRI), through GCRI US in Washington, DC and GCRI Canada in Ontario, with GCRI Canada as Lead Institution, Consortium Secretariat and lead contracting organisation; The Global Risks Forum (GRF); and The Global Risks Alliance (GRA). Technology, infrastructure and service providers work with the Consortium at arm’s length under written agreements, like every other external party in the public-private-planet model, and hold no role in its stewardship.
Her değer, kendi lisanslarını koruyan kaynaklarının atfını taşır. Harici adlara yalnızca birlikte çalışabilirlik amacıyla atıf yapılır. Nexus tarafından yazılan metinlerin yayımlandığında CC BY 4.0 kapsamında olması amaçlanmaktadır.
Avis en français
La méthodologie et les définitions du NXS-GRX sont un projet de travail préparatoire (2026). Le NXS-GRX est une information de recherche et d’analyse des risques : ni notation, ni indice de référence financier, ni statistique officielle, ni alerte, ni conseil. Les classes de risque sont des bandes sur une échelle publiée, non des classements.