Cyber Risk Barometer · working paper
Every country's cyber resilience
A country-by-country view of cyber resilience, built the way we rate everything in the Barometer: open indicators, one country at a time, every number traceable to its source. It maps each country's first-pass cyber resilience rating and national CERT, and sets them beside the economics that shape cyber capacity — wealth, government debt, higher education and how much of the population is online. Every country has its own page showing our reasoning in full, with Economy, Governance and Education context and bloc memberships borrowed from the Bloch Index; the super league compares the EU, China and the United States.
First cut · national CERT list and World Bank data, October 2026Map: Cyber Risk Barometer · WLD-CRB-63 · Source: Cyber Risk Barometer first-pass cyber resilience rating (Council of Europe Treaty Office; European Commission and ICO adequacy lists; our national-CERT list and daily feed collector; our passive checks of government domains); country outlines © Natural Earth
League table
| Country | CERT | Broadband /100 | Internet % | GDP/cap PPP | Central govt debt % | Tertiary % |
|---|
Table: Cyber Risk Barometer · WLD-CRB-64 · Source: Cyber Risk Barometer first-pass cyber resilience rating (3 of 7 pillars; see each country's page for the evidence); national-CERT list and daily feed collector; World Bank World Development Indicators (fixed broadband live; other columns via the Bloch Index snapshot); memberships from the Bloch Index. Click a country name for its page.
Method (first cut). CERT presence and activity come from the Cyber Risk Barometer's national-CERT list (the FIRST teams directory plus hand-added teams; "active" = our daily collector has a working feed for it). Economic, connectivity and education indicators come from the World Bank: fixed broadband subscriptions per 100 people (IT.NET.BBND.P2, fetched live; higher is better), individuals using the internet (% of population), GDP per capita (PPP), central-government debt (% GDP; the IMF Government Finance Statistics consolidated series, which excludes state and local debt and intragovernmental holdings, so it runs below gross-debt figures such as the US Treasury's) and tertiary-education enrolment (% gross). The cyber resilience rating is a first pass on the Barometer's country-ratings methodology: three of its seven pillars are scored so far — gold-standard data protection (Convention 108/108+, EU and UK adequacy, EU/EEA membership; 20 points), national CERT in action (the three indicators our list and collector measure, out of 9; weight 15) and government cyber hygiene (passive DMARC, SPF, DNSSEC, HTTPS, HSTS and security.txt checks of the national CERT's and the data protection authority's websites; 15) — with the weights renormalised over the scored pillars and banded A to E on fixed edges (80, 65, 50, 35). Citizens' rights, incident reporting, cybercrime cooperation and AI safeguards are still to be scored, so ratings will move. Each country's page shows the evidence behind these in full, alongside the Economy, Governance and Education pillars of the Bloch Index (World Bank and OECD data) and bloc memberships taken from the Bloch Index, so the two sites group countries the same way; the organisation filter above uses that list. Country outlines © Natural Earth.