Rank Country National Cyber Security IndexNCSI Digital developmentISD DifferenceDif
1. Albania 98.33 62.34 35.99
2. France 97.50 78.08 19.42
3. Romania 95.83 64.57 31.26
4. Finland 95.83 85.76 10.07
6. Lithuania 95.00 75.53 19.47
5. Jordan 95.00 57.77 37.23
7. Estonia 94.17 82.56 11.61
8. Hungary 93.33 67.88 25.45
9. Moldova 90.83 62.66 28.17
11. Italy 90.00 73.58 16.42
10. Poland 90.00 73.21 16.79
12. Czechia 89.17 72.93 16.24
13. Slovenia 89.17 73.49 15.68
14. Spain 89.17 78.61 10.56
16. Ukraine 88.33 71.87 16.46
19. Netherlands 87.50 84.66 2.84
18. Latvia 87.50 73.10 14.40
17. Slovakia 87.50 67.55 19.95
20. Sweden 86.67 84.13 2.54
21. Portugal 85.83 72.94 12.89
22. Greece 85.00 69.82 15.18
24. Germany 85.00 75.73 9.27
26. Australia 85.00 82.60 2.40
23. Chile 85.00 70.84 14.16
27. Singapore 85.00 86.93 -1.93
25. Austria 85.00 78.35 6.65
29. United States 84.17 85.46 -1.29
28. North Macedonia 84.17 58.31 25.86
30. Cyprus 83.33 71.44 11.89
31. United Arab Emirates 83.33 79.06 4.27
32. Korea (Republic of) 83.33 85.82 -2.49
34. Canada 82.50 78.14 4.36
35. Japan 82.50 82.24 0.26
33. Croatia 82.50 70.07 12.43
36. Kazakhstan 81.67 70.31 11.36
37. Belgium 81.67 73.55 8.12
40. Uruguay 80.83 71.73 9.10
39. Serbia 80.83 70.05 10.78
38. Bulgaria 80.83 67.30 13.53
41. Tunisia 80.00 55.46 24.54
42. Azerbaijan 80.00 61.08 18.92
43. United Kingdom 80.00 84.67 -4.67
44. Nigeria 79.17 41.51 37.66
45. Dominican Republic 79.17 57.70 21.47
46. Norway 79.17 81.43 -2.26
47. Switzerland 79.17 81.88 -2.71
48. Montenegro 78.33 60.85 17.48
49. Saudi Arabia 78.33 77.39 0.94
50. Iceland 78.33 80.79 -2.46
51. Luxembourg 77.50 75.06 2.44
52. India 75.83 60.21 15.62
53. Morocco 74.17 57.17 17.00
54. Georgia 72.50 63.61 8.89
55. Malaysia 72.50 69.50 3.00
56. Kenya 71.67 55.10 16.57
58. Türkiye 71.67 70.89 0.78
57. Brazil 71.67 69.62 2.05
59. Ireland 70.83 78.79 -7.96
60. Argentina 70.00 67.36 2.64
62. Mongolia 69.17 64.23 4.94
61. Andorra 69.17 34.47 34.70
63. China 69.17 77.94 -8.77
64. Liechtenstein 68.33 42.64 25.69
65. Peru 68.33 62.73 5.60
66. Ghana 67.50 53.56 13.94
67. Bangladesh 66.67 54.63 12.04
68. Rwanda 65.00 50.58 14.42
69. Bahrain 65.00 72.73 -7.73
70. New Zealand 65.00 79.24 -14.24
71. Costa Rica 63.33 66.77 -3.44
72. Mexico 61.67 64.41 -2.74
74. Qatar 60.83 69.88 -9.05
73. Uganda 60.83 38.77 22.06
75. Ethiopia 60.00 30.36 29.64
76. Benin 59.17 40.70 18.47
79. Oman 58.33 69.64 -11.31
77. Egypt 58.33 55.71 2.62
78. Panama 58.33 59.30 -0.97
80. Malta 58.33 74.31 -15.98
82. Monaco 57.50 42.29 15.21
81. Tanzania 57.50 39.00 18.50
83. Colombia 56.67 63.79 -7.12
84. Philippines 55.83 63.07 -7.24
85. Mauritius 55.83 63.12 -7.29
86. Cabo Verde 55.00 51.07 3.93
87. Uzbekistan 55.00 62.43 -7.43
89. Kyrgyz Republic 53.33 58.66 -5.33
88. Bhutan 53.33 32.56 20.77
90. South Africa 51.67 66.98 -15.31
91. Togo 50.83 19.60 31.23
92. Kosovo 50.00
93. Tonga 48.33 25.82 22.51
94. Pakistan 48.33 46.20 2.13
95. Indonesia 47.50 66.88 -19.38
96. Jamaica 45.83 54.64 -8.81
97. Kuwait 44.17 63.71 -19.54
98. Papua New Guinea 42.50 15.38 27.12
99. Myanmar 41.67 50.01 -8.34
100. Botswana 40.83 47.86 -7.03
101. Ecuador 40.83 61.38 -20.55
102. Bosnia and Herzegovina 39.17 53.25 -14.08
103. Armenia 38.33 66.88 -28.55
106. Senegal 37.50 45.37 -7.87
104. Comoros 37.50 12.93 24.57
105. Vanuatu 37.50 27.14 10.36
107. The Bahamas 36.67 35.72 0.95
109. Bolivia 36.67 52.38 -15.71
108. Algeria 36.67 49.40 -12.73
110. Mozambique 35.83 27.56 8.27
111. Trinidad and Tobago 35.83 53.11 -17.28
112. Fiji 35.00 33.77 1.23
113. Cameroon 34.17 38.77 -4.60
115. Cambodia 32.50 46.60 -14.10
114. Kiribati 32.50 22.86 9.64
116. Marshall Islands 31.67 24.12 7.55
118. Seychelles 31.67 57.86 -26.19
117. Angola 31.67 33.37 -1.70
119. Djibouti 30.83 14.56 16.27
121. Maldives 30.00 29.43 0.57
120. Sierra Leone 30.00 26.93 3.07
122. Lao PDR 29.17 40.20 -11.03
123. Guinea 28.33 30.03 -1.70
124. Burkina Faso 27.50 27.43 0.07
125. Zimbabwe 26.67 37.57 -10.90
127. Eswatini 25.83 30.41 -4.58
126. Congo 25.83 16.96 8.87
130. Guatemala 25.00 46.95 -21.95
129. Libya 25.00 27.33 -2.33
128. Chad 25.00 20.04 4.96
131. Iraq 24.17 22.86 1.31
132. Venezuela 24.17 45.22 -21.05
133. Honduras 23.33 42.48 -19.15
136. Lebanon 21.67 54.49 -32.82
134. Congo (Democratic Republic of the) 21.67 24.32 -2.65
135. Suriname 21.67 31.83 -10.16
137. Samoa 20.83 24.50 -3.67
139. San Marino 19.17 32.76 -13.59
138. Mauritania 19.17 31.04 -11.87
140. Nicaragua 18.33 40.83 -22.50
142. Tajikistan 15.83 28.03 -12.20
145. Belize 14.17 24.36 -10.19
143. Vatican City 14.17
144. Turkmenistan 14.17 23.79 -9.62
147. Solomon Islands 13.33 18.41 -5.08
146. Liberia 13.33 12.57 0.76
148. Saint Kitts and Nevis 12.50 31.53 -19.03
149. Tuvalu 11.67 20.22 -8.55
150. Mali 11.67 30.44 -18.77
151. Naoero 10.83 22.27 -11.44
152. Madagascar 10.83 29.68 -18.85
153. Saint Lucia 6.67 26.28 -19.61
154. Burundi 5.00 22.75 -17.75
156. Micronesia (Federated States of) 4.17 16.18 -12.01
155. Haiti 4.17 10.59 -6.42
157. Palau 3.33 25.09 -21.76
158. Timor-Leste 2.50 20.10 -17.60
STRATEGIC CYBERSECURITY INDICATORS
  • 1. CYBERSECURITY POLICY
    15
    15
    15
    15
    12
    15
    15
    15
    15
    15
    15
    15
    15
    15
    15
    15
    15
    15
    12
    15
    15
    15
    12
    15
    6
    15
    12
    15
    15
    15
    15
    15
    15
    15
    12
    15
    9
    15
    9
    15
    15
    15
    9
    15
    12
    15
    15
    15
    9
    15
    15
    15
    12
    15
    15
    15
    9
    15
    15
    15
    12
    15
    12
    15
    12
    15
    12
    15
    15
    15
    6
    15
    12
    15
    15
    15
    9
    15
    15
    15
    15
    15
    9
    15
    15
    15
    15
    15
    9
    15
    12
    15
    15
    15
    9
    15
    15
    15
    9
    15
    0
    15
    12
    15
    15
    15
    9
    15
    12
    15
    12
    15
    9
    15
    6
    15
    12
    15
    15
    15
    12
    15
    6
    15
    9
    15
    6
    15
    15
    15
    12
    15
    9
    15
    9
    15
    9
    15
    12
    15
    12
    15
    9
    15
    9
    15
    9
    15
    9
    15
    6
    15
    12
    15
    12
    15
    3
    15
    9
    15
    9
    15
    6
    15
    12
    15
    9
    15
    6
    15
    6
    15
    9
    15
    12
    15
    12
    15
    12
    15
    6
    15
    9
    15
    9
    15
    9
    15
    6
    15
    6
    15
    15
    15
    12
    15
    9
    15
    12
    15
    0
    15
    6
    15
    6
    15
    9
    15
    12
    15
    3
    15
    0
    15
    6
    15
    3
    15
    3
    15
    9
    15
    3
    15
    9
    15
    3
    15
    9
    15
    6
    15
    9
    15
    6
    15
    12
    15
    6
    15
    6
    15
    12
    15
    6
    15
    6
    15
    9
    15
    6
    15
    6
    15
    6
    15
    3
    15
    3
    15
    6
    15
    0
    15
    3
    15
    6
    15
    0
    15
    3
    15
    0
    15
    9
    15
    0
    15
    0
    15
    3
    15
    0
    15
    3
    15
    6
    15
    3
    15
    0
    15
    6
    15
    0
    15
    0
    15
    0
    15
    0
    15
    0
    15
    3
    15
    0
    15
    0
    15
    3
    15
    • 1.1. High-level cybersecurity leadership
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The country has appointed governmental leadership responsible for cybersecurity at the national level.

      Accepted references

      Legal act, national strategy, official statutes or terms of reference, or official website

    • 1.2. Cybersecurity policy development
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      There is a competent entity in the central government to whom responsibility is assigned for national cybersecurity strategy and policy development.

      Accepted references

      Legal act, official statute or terms of reference, or official website

    • 1.3. Cybersecurity policy coordination
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      Criteria

      The country has a regular official format for cybersecurity policy coordination at the national level. (The official format may take various forms, such as permanent committees, councils, or working groups.)

      Accepted references

      Legal act, official statute or terms of reference, or official website

    • 1.4. National cybersecurity strategy
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The central government has established a national-level cybersecurity strategy defining strategic cybersecurity objectives and measures to improve cybersecurity across society.

      Accepted references

      Valid official document

    • 1.5. National cybersecurity strategy action plan
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The central government has established an action plan to implement the national cybersecurity strategy.

      Accepted references

      Current official document, legal act, or official statement

  • 2. GLOBAL CYBERSECURITY CONTRIBUTION
    6
    6
    6
    6
    6
    6
    6
    6
    5
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    4
    6
    6
    6
    6
    6
    6
    6
    4
    6
    6
    6
    6
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    4
    6
    5
    6
    6
    6
    6
    6
    6
    6
    6
    6
    4
    6
    6
    6
    6
    6
    6
    6
    5
    6
    3
    6
    4
    6
    3
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    6
    5
    6
    6
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    4
    6
    3
    6
    4
    6
    4
    6
    4
    6
    2
    6
    3
    6
    5
    6
    4
    6
    3
    6
    6
    6
    3
    6
    3
    6
    4
    6
    6
    6
    4
    6
    4
    6
    6
    6
    3
    6
    3
    6
    3
    6
    5
    6
    3
    6
    3
    6
    5
    6
    0
    6
    3
    6
    4
    6
    4
    6
    3
    6
    2
    6
    3
    6
    3
    6
    3
    6
    1
    6
    3
    6
    3
    6
    4
    6
    4
    6
    0
    6
    3
    6
    3
    6
    0
    6
    0
    6
    3
    6
    0
    6
    4
    6
    3
    6
    4
    6
    0
    6
    2
    6
    5
    6
    3
    6
    3
    6
    4
    6
    0
    6
    4
    6
    3
    6
    6
    6
    2
    6
    0
    6
    3
    6
    3
    6
    0
    6
    0
    6
    3
    6
    3
    6
    3
    6
    0
    6
    3
    6
    3
    6
    3
    6
    3
    6
    0
    6
    3
    6
    0
    6
    0
    6
    3
    6
    3
    6
    0
    6
    3
    6
    0
    6
    0
    6
    3
    6
    3
    6
    3
    6
    0
    6
    4
    6
    0
    6
    0
    6
    3
    6
    0
    6
    0
    6
    3
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    3
    6
    0
    6
    0
    6
    • 2.1. Cyber diplomacy engagements
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      Criteria

      The government contributes to international or regional cooperation formats dedicated to cybersecurity and cyber stability. (The indicator is limited to strategic-level cooperation; operational-level incident response cooperation and cross-border law enforcement cooperation are addressed separately under other indicators.)

      Accepted references

      Official website of the organisation or cooperation format, official statement or contribution

    • 2.2. Commitment to international law in cyberspace
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      0
      1
      1
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      Criteria

      The country has an official position on the application of international law, including human rights, in the context of cyber operations.

      Accepted references

      Official document or statement, international indexes

    • 2.3. Contribution to international capacity building in cybersecurity
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      The country has led or supported cybersecurity capacity building for another country in the past three years.

      Accepted references

      Official website or project document

  • 3. EDUCATION AND PROFESSIONAL DEVELOPMENT
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    8
    10
    10
    10
    10
    10
    10
    10
    10
    10
    8
    10
    10
    10
    10
    10
    10
    10
    10
    10
    6
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    6
    10
    10
    10
    10
    10
    10
    10
    6
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    10
    7
    10
    8
    10
    10
    10
    6
    10
    6
    10
    6
    10
    10
    10
    6
    10
    6
    10
    10
    10
    10
    10
    8
    10
    5
    10
    10
    10
    5
    10
    6
    10
    4
    10
    8
    10
    6
    10
    8
    10
    10
    10
    6
    10
    6
    10
    6
    10
    6
    10
    6
    10
    6
    10
    10
    10
    6
    10
    6
    10
    8
    10
    4
    10
    8
    10
    6
    10
    8
    10
    10
    10
    7
    10
    5
    10
    10
    10
    6
    10
    3
    10
    6
    10
    3
    10
    5
    10
    6
    10
    6
    10
    8
    10
    8
    10
    2
    10
    5
    10
    3
    10
    5
    10
    8
    10
    6
    10
    6
    10
    3
    10
    0
    10
    2
    10
    6
    10
    6
    10
    4
    10
    4
    10
    5
    10
    5
    10
    5
    10
    2
    10
    2
    10
    2
    10
    3
    10
    0
    10
    5
    10
    0
    10
    0
    10
    1
    10
    3
    10
    10
    10
    0
    10
    0
    10
    6
    10
    7
    10
    0
    10
    8
    10
    0
    10
    6
    10
    6
    10
    0
    10
    0
    10
    2
    10
    2
    10
    0
    10
    2
    10
    2
    10
    6
    10
    0
    10
    2
    10
    2
    10
    2
    10
    0
    10
    0
    10
    0
    10
    2
    10
    3
    10
    0
    10
    0
    10
    0
    10
    0
    10
    0
    10
    0
    10
    • 3.1. Cyber safety competencies in primary education
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Primary education curricula in the public education system include cyber safety (online safety, computer safety) competencies.

      Accepted references

      Official curriculum or official report

    • 3.2. Cyber safety competencies in secondary education
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Secondary education curricula in the public education system include cyber safety (online safety, computer safety) competencies.

      Accepted references

      Official curriculum or official report

    • 3.3. Undergraduate cybersecurity education
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      At least one undergraduate education programme is available in the country to train students in cybersecurity.

      Accepted references

      Accredited study programme

    • 3.4. Graduate cybersecurity education
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      At least one cybersecurity education programme is available in the country at the graduate level.

      Accepted references

      Accredited study programme

    • 3.5. Association of cybersecurity professionals
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      0
      1
      1
      1
      1
      1
      1
      1
      1
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      0
      1
      1
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      0
      1
      0
      1
      1
      1
      0
      1
      0
      1
      1
      1
      0
      1
      1
      1
      1
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      0
      1
      Criteria

      A professional association of cybersecurity specialists, managers, or auditors exists in the country.

      Accepted references

      Official website

  • 4. CYBERSECURITY RESEARCH AND DEVELOPMENT
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    2
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    0
    4
    4
    4
    2
    4
    4
    4
    0
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    2
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    0
    4
    4
    4
    4
    4
    0
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    2
    4
    4
    4
    2
    4
    2
    4
    0
    4
    0
    4
    0
    4
    4
    4
    0
    4
    4
    4
    0
    4
    4
    4
    0
    4
    0
    4
    4
    4
    2
    4
    4
    4
    4
    4
    2
    4
    2
    4
    2
    4
    2
    4
    4
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    0
    4
    0
    4
    2
    4
    0
    4
    0
    4
    0
    4
    2
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    2
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    0
    4
    2
    4
    0
    4
    0
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    2
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    0
    4
    • 4.1. Cybersecurity research and development programmes
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      A cybersecurity research and development (R&D) programme or institute exists and is recognised and/or supported by the government.

      Accepted references

      Official programme or official website

    • 4.2. Cybersecurity doctoral studies
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      An officially recognised PhD programme exists accommodating research in cybersecurity.

      Accepted references

      Official programme or official website

PREVENTIVE CYBERSECURITY INDICATORS
  • 5. CYBERSECURITY OF CRITICAL INFORMATION INFRASTRUCTURE
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    9
    12
    12
    12
    12
    12
    12
    12
    9
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    9
    12
    12
    12
    12
    12
    12
    12
    6
    12
    9
    12
    6
    12
    9
    12
    6
    12
    12
    12
    12
    12
    9
    12
    9
    12
    12
    12
    12
    12
    6
    12
    12
    12
    9
    12
    12
    12
    9
    12
    12
    12
    6
    12
    9
    12
    12
    12
    9
    12
    12
    12
    6
    12
    9
    12
    12
    12
    12
    12
    12
    12
    3
    12
    3
    12
    9
    12
    9
    12
    12
    12
    9
    12
    12
    12
    6
    12
    6
    12
    3
    12
    12
    12
    12
    12
    6
    12
    9
    12
    3
    12
    6
    12
    12
    12
    12
    12
    12
    12
    9
    12
    6
    12
    12
    12
    6
    12
    9
    12
    0
    12
    12
    12
    0
    12
    0
    12
    3
    12
    6
    12
    0
    12
    6
    12
    0
    12
    3
    12
    3
    12
    12
    12
    0
    12
    0
    12
    6
    12
    3
    12
    0
    12
    3
    12
    0
    12
    0
    12
    0
    12
    6
    12
    9
    12
    0
    12
    6
    12
    3
    12
    0
    12
    3
    12
    0
    12
    0
    12
    9
    12
    0
    12
    0
    12
    9
    12
    0
    12
    3
    12
    0
    12
    6
    12
    0
    12
    3
    12
    0
    12
    3
    12
    0
    12
    6
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    3
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    • 5.1. Identification of critical information infrastructure
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      There is a framework or a mechanism to identify operators of critical information infrastructure.

      Accepted references

      Legal or administrative act

    • 5.2. Cybersecurity requirements for operators of critical information infrastructure
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Operators of critical (information) infrastructure are required to assess and manage cyber risks and/or implement cybersecurity measures.

      Accepted references

      Legal act, or mandatory cybersecurity framework or standard

    • 5.3. Cybersecurity requirements for public sector organisations
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Public sector organisations are required to assess and manage cyber risks and/or implement cybersecurity measures.

      Accepted references

      Legal or administrative act, mandatory cybersecurity framework or standard

    • 5.4. Competent supervisory authority
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      A competent authority has been designated and allocated powers to supervise the implementation of cyber/information security measures.

      Accepted references

      Legal act or official website

  • 6. CYBERSECURITY OF DIGITAL ENABLERS
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    12
    10
    12
    12
    12
    10
    12
    10
    12
    12
    12
    12
    12
    12
    12
    12
    12
    4
    12
    10
    12
    12
    12
    10
    12
    12
    12
    10
    12
    12
    12
    8
    12
    10
    12
    12
    12
    8
    12
    6
    12
    10
    12
    10
    12
    12
    12
    12
    12
    4
    12
    8
    12
    10
    12
    8
    12
    10
    12
    12
    12
    10
    12
    10
    12
    12
    12
    8
    12
    6
    12
    10
    12
    8
    12
    10
    12
    8
    12
    8
    12
    12
    12
    10
    12
    8
    12
    8
    12
    12
    12
    8
    12
    10
    12
    10
    12
    8
    12
    10
    12
    10
    12
    6
    12
    8
    12
    10
    12
    10
    12
    10
    12
    10
    12
    4
    12
    10
    12
    4
    12
    10
    12
    6
    12
    8
    12
    4
    12
    4
    12
    10
    12
    6
    12
    12
    12
    10
    12
    8
    12
    4
    12
    10
    12
    8
    12
    6
    12
    6
    12
    2
    12
    4
    12
    8
    12
    4
    12
    0
    12
    8
    12
    8
    12
    4
    12
    8
    12
    0
    12
    10
    12
    6
    12
    2
    12
    6
    12
    4
    12
    6
    12
    4
    12
    2
    12
    4
    12
    0
    12
    0
    12
    6
    12
    2
    12
    0
    12
    8
    12
    8
    12
    8
    12
    0
    12
    0
    12
    0
    12
    0
    12
    2
    12
    0
    12
    6
    12
    4
    12
    4
    12
    8
    12
    4
    12
    2
    12
    0
    12
    4
    12
    0
    12
    0
    12
    0
    12
    2
    12
    2
    12
    6
    12
    2
    12
    6
    12
    2
    12
    0
    12
    4
    12
    2
    12
    0
    12
    6
    12
    4
    12
    2
    12
    2
    12
    0
    12
    0
    12
    4
    12
    0
    12
    6
    12
    2
    12
    0
    12
    4
    12
    0
    12
    2
    12
    0
    12
    0
    12
    0
    12
    2
    12
    0
    12
    0
    12
    • 6.1. Secure electronic identification
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      A national electronic identification solution exists that allows for officially recognised and secure electronic identification of natural and/or legal persons.

      Accepted references

      Legal act, nationally recognised identification scheme, or official website

    • 6.2. Electronic signature
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      Criteria

      A nationally recognised and publicly available solution exists to issue secure and legally binding electronic signatures.

      Accepted references

      Legal act or official website

    • 6.3. Trust services
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Trust services (e.g. digital certificates, timestamps, private key management service) are regulated, at least for use in the public sector.

      Accepted references

      Legal act or official website

    • 6.4. Supervisory authority for trust services
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      An independent authority has been designated and given the power to supervise trust services and trust service providers.

      Accepted references

      Legal act or official website

    • 6.5. Cybersecurity requirements for cloud services
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Requirements are established for the secure use of cloud services in government and/or public sector organisations.

      Accepted references

      Legal or administrative act, cybersecurity framework or standard

    • 6.6. Supply chain cybersecurity
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Requirements are established to identify and manage cybersecurity risks through the ICT supply chain.

      Accepted references

      Legal act or official website

  • 7. CYBER THREAT ANALYSIS AND AWARENESS RAISING
    12
    12
    9
    12
    12
    12
    9
    12
    9
    12
    12
    12
    9
    12
    12
    12
    9
    12
    9
    12
    9
    12
    9
    12
    12
    12
    9
    12
    9
    12
    9
    12
    9
    12
    9
    12
    9
    12
    9
    12
    6
    12
    9
    12
    9
    12
    9
    12
    9
    12
    6
    12
    9
    12
    9
    12
    9
    12
    9
    12
    6
    12
    9
    12
    6
    12
    9
    12
    9
    12
    9
    12
    9
    12
    6
    12
    9
    12
    9
    12
    9
    12
    9
    12
    3
    12
    9
    12
    9
    12
    9
    12
    3
    12
    9
    12
    9
    12
    9
    12
    9
    12
    6
    12
    9
    12
    12
    12
    9
    12
    6
    12
    9
    12
    6
    12
    9
    12
    6
    12
    9
    12
    6
    12
    6
    12
    9
    12
    6
    12
    9
    12
    6
    12
    6
    12
    9
    12
    9
    12
    3
    12
    9
    12
    6
    12
    9
    12
    3
    12
    6
    12
    6
    12
    12
    12
    6
    12
    6
    12
    9
    12
    9
    12
    6
    12
    6
    12
    3
    12
    9
    12
    6
    12
    3
    12
    3
    12
    3
    12
    6
    12
    6
    12
    6
    12
    3
    12
    6
    12
    9
    12
    6
    12
    6
    12
    3
    12
    0
    12
    3
    12
    0
    12
    3
    12
    3
    12
    3
    12
    6
    12
    6
    12
    3
    12
    9
    12
    9
    12
    3
    12
    6
    12
    6
    12
    3
    12
    3
    12
    3
    12
    0
    12
    3
    12
    6
    12
    0
    12
    6
    12
    6
    12
    0
    12
    0
    12
    3
    12
    0
    12
    0
    12
    3
    12
    3
    12
    3
    12
    3
    12
    0
    12
    3
    12
    0
    12
    3
    12
    6
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    3
    12
    0
    12
    3
    12
    0
    12
    3
    12
    3
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    0
    12
    • 7.1. Cyber threat analysis
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      A government entity has been assigned the responsibility for national-level cybersecurity and/or cyber threat assessments.

      Accepted references

      Legal act, statute, or official website

    • 7.2. Public cyber threat reports
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Public cyber threat reports and notifications are issued at least once a year.

      Accepted references

      Official website, official social media channel, or public report

    • 7.3. Public cybersecurity awareness resources
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Public authorities provide publicly available cybersecurity advisories, tools, and resources for users, organisations, and ICT and cybersecurity professionals.

      Accepted references

      Official website, public advisories

    • 7.4. Cybersecurity awareness raising coordination
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      There is an entity with the clearly assigned responsibility to lead and/or coordinate national cybersecurity awareness activities.

      Accepted references

      Legal act, official document, or official website

  • 8. PROTECTION OF PERSONAL DATA
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    0
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    2
    4
    4
    4
    4
    4
    4
    4
    0
    4
    0
    4
    2
    4
    4
    4
    4
    4
    0
    4
    2
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    4
    0
    4
    4
    4
    4
    4
    0
    4
    4
    4
    0
    4
    4
    4
    0
    4
    2
    4
    0
    4
    0
    4
    4
    4
    4
    4
    4
    4
    2
    4
    0
    4
    0
    4
    2
    4
    2
    4
    2
    4
    4
    4
    4
    4
    4
    4
    0
    4
    0
    4
    4
    4
    0
    4
    0
    4
    0
    4
    2
    4
    4
    4
    0
    4
    0
    4
    4
    4
    4
    4
    2
    4
    2
    4
    2
    4
    4
    4
    2
    4
    0
    4
    0
    4
    4
    4
    0
    4
    4
    4
    0
    4
    2
    4
    2
    4
    0
    4
    0
    4
    0
    4
    2
    4
    0
    4
    • 8.1. Personal data protection legislation
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      Criteria

      There is a legal act for personal data protection that is applicable to the protection of data online or in digital form.

      Accepted references

      Legal act

    • 8.2. Personal data protection authority
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      An independent public supervisory authority has been designated and allocated powers to supervise personal data protection.

      Accepted references

      Legal act or official website

RESPONSIVE CYBERSECURITY INDICATORS
  • 9. CYBER INCIDENT RESPONSE
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    12
    14
    11
    14
    9
    14
    14
    14
    12
    14
    14
    14
    14
    14
    14
    14
    12
    14
    14
    14
    11
    14
    11
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    14
    11
    14
    14
    14
    12
    14
    12
    14
    11
    14
    14
    14
    14
    14
    11
    14
    14
    14
    11
    14
    11
    14
    14
    14
    14
    14
    14
    14
    9
    14
    11
    14
    14
    14
    11
    14
    14
    14
    14
    14
    14
    14
    12
    14
    9
    14
    11
    14
    11
    14
    12
    14
    9
    14
    12
    14
    11
    14
    14
    14
    14
    14
    9
    14
    14
    14
    11
    14
    14
    14
    14
    14
    11
    14
    11
    14
    11
    14
    9
    14
    11
    14
    6
    14
    8
    14
    11
    14
    9
    14
    11
    14
    11
    14
    6
    14
    9
    14
    9
    14
    14
    14
    6
    14
    3
    14
    9
    14
    9
    14
    11
    14
    14
    14
    8
    14
    9
    14
    11
    14
    11
    14
    11
    14
    5
    14
    3
    14
    8
    14
    6
    14
    5
    14
    8
    14
    6
    14
    0
    14
    0
    14
    8
    14
    3
    14
    6
    14
    9
    14
    8
    14
    8
    14
    0
    14
    8
    14
    8
    14
    3
    14
    8
    14
    5
    14
    3
    14
    3
    14
    5
    14
    0
    14
    9
    14
    0
    14
    6
    14
    8
    14
    0
    14
    3
    14
    0
    14
    6
    14
    3
    14
    3
    14
    6
    14
    2
    14
    3
    14
    6
    14
    0
    14
    0
    14
    3
    14
    8
    14
    5
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    3
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    0
    14
    • 9.1. National incident response capacity
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      There is a CERT designated with nationwide responsibilities for cyber incident detection and response.

      Accepted references

      Legal act or official website

    • 9.2. Incident reporting obligations
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Operators of critical information infrastructure and/or government institutions are obliged to notify the designated competent authorities about cyber incidents.

      Accepted references

      Legal act or official website

    • 9.3. Cyber incident reporting tool
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      A publicly available official resource is provided for notifying competent authorities about cyber incidents.

      Accepted references

      Official website

    • 9.4. Single point of contact for international cooperation
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The government has designated a single point of contact for international cybersecurity cooperation.

      Accepted references

      Legal act or official website

    • 9.5. Participation in international incident response cooperation
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The national cyber incident response team (CSIRT/CERT/CIRT) participates in international or regional cyber incident response formats.

      Accepted references

      Official website or official document

  • 10. CYBER CRISIS MANAGEMENT
    9
    9
    9
    9
    7
    9
    7
    9
    9
    9
    7
    9
    7
    9
    5
    9
    7
    9
    5
    9
    6
    9
    2
    9
    9
    9
    5
    9
    5
    9
    7
    9
    7
    9
    2
    9
    4
    9
    5
    9
    5
    9
    4
    9
    7
    9
    5
    9
    7
    9
    5
    9
    9
    9
    5
    9
    5
    9
    6
    9
    5
    9
    4
    9
    5
    9
    4
    9
    4
    9
    7
    9
    2
    9
    5
    9
    2
    9
    3
    9
    0
    9
    6
    9
    2
    9
    5
    9
    5
    9
    5
    9
    4
    9
    7
    9
    5
    9
    6
    9
    7
    9
    2
    9
    2
    9
    4
    9
    2
    9
    2
    9
    5
    9
    4
    9
    2
    9
    5
    9
    3
    9
    7
    9
    2
    9
    3
    9
    3
    9
    0
    9
    5
    9
    3
    9
    4
    9
    4
    9
    5
    9
    7
    9
    2
    9
    2
    9
    0
    9
    5
    9
    2
    9
    5
    9
    0
    9
    3
    9
    0
    9
    0
    9
    5
    9
    0
    9
    2
    9
    2
    9
    3
    9
    2
    9
    0
    9
    0
    9
    2
    9
    2
    9
    5
    9
    2
    9
    3
    9
    5
    9
    3
    9
    2
    9
    2
    9
    0
    9
    2
    9
    0
    9
    0
    9
    0
    9
    2
    9
    5
    9
    0
    9
    0
    9
    2
    9
    3
    9
    2
    9
    0
    9
    0
    9
    2
    9
    2
    9
    3
    9
    0
    9
    2
    9
    0
    9
    0
    9
    2
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    2
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    0
    9
    2
    9
    0
    9
    0
    9
    0
    9
    2
    9
    0
    9
    0
    9
    2
    9
    0
    9
    2
    9
    0
    9
    0
    9
    0
    9
    2
    9
    0
    9
    2
    9
    0
    9
    • 10.1. Cyber crisis management plan
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      The government has established a crisis management plan for large-scale cyber incidents.

      Accepted references

      Legal act or official website

    • 10.2. National cyber crisis management exercises
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Regular interagency cyber crisis management exercises or crisis management exercises with a cyber component are arranged at the national level at least every other year.

      Accepted references

      Exercise document, official website, or press release

    • 10.3. Participation in international cyber crisis exercises
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      Criteria

      The country participates in an international cyber crisis management exercise at least every other year.

      Accepted references

      Exercise document/website or press release

    • 10.4. Operational crisis reserve
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      A mechanism for engaging reserve support has been established to reinforce government bodies in managing cyber crises.

      Accepted references

      Legal act or official website

  • 11. FIGHT AGAINST CYBERCRIME
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    14
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    11
    16
    16
    16
    16
    16
    16
    16
    16
    16
    6
    16
    14
    16
    16
    16
    16
    16
    16
    16
    11
    16
    16
    16
    8
    16
    16
    16
    16
    16
    14
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    16
    9
    16
    11
    16
    14
    16
    11
    16
    13
    16
    16
    16
    9
    16
    11
    16
    13
    16
    13
    16
    11
    16
    16
    16
    8
    16
    11
    16
    11
    16
    16
    16
    14
    16
    16
    16
    8
    16
    16
    16
    11
    16
    10
    16
    13
    16
    8
    16
    9
    16
    11
    16
    11
    16
    11
    16
    5
    16
    6
    16
    13
    16
    11
    16
    14
    16
    8
    16
    14
    16
    16
    16
    16
    16
    11
    16
    8
    16
    3
    16
    11
    16
    14
    16
    6
    16
    9
    16
    10
    16
    11
    16
    8
    16
    11
    16
    6
    16
    11
    16
    3
    16
    11
    16
    14
    16
    16
    16
    16
    16
    14
    16
    6
    16
    11
    16
    11
    16
    5
    16
    9
    16
    3
    16
    5
    16
    16
    16
    14
    16
    6
    16
    16
    16
    6
    16
    6
    16
    9
    16
    6
    16
    5
    16
    14
    16
    6
    16
    8
    16
    6
    16
    9
    16
    6
    16
    6
    16
    8
    16
    3
    16
    9
    16
    0
    16
    6
    16
    8
    16
    9
    16
    6
    16
    8
    16
    3
    16
    11
    16
    3
    16
    11
    16
    6
    16
    6
    16
    6
    16
    6
    16
    0
    16
    0
    16
    6
    16
    0
    16
    3
    16
    9
    16
    6
    16
    6
    16
    6
    16
    0
    16
    0
    16
    0
    16
    0
    16
    • 11.1. Cybercrime offences in national law
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Cybercrime offences are defined in national legislation.

      Accepted references

      Legal act

    • 11.2. Procedural law provisions
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Legislation defines the powers and procedures for cybercrime investigations and proceedings and for the collection of electronic evidence.

      Accepted references

      Legal act

    • 11.3. Ratification of or accession to the Convention on Cybercrime
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      The country has ratified or acceded to the Council of Europe (CoE) Convention on Cybercrime.

      Accepted references

      Legal act on Convention ratification or accession, website of the CoE Treaty Office

    • 11.4. Cybercrime investigation capacity
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      Law enforcement has a specialised function and capacity to prevent and investigate cybercrime offences.

      Accepted references

      Legal act or official website

    • 11.5. Digital forensics capacity
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Law enforcement has a specialised function and capacity for digital forensics.

      Accepted references

      Legal act, statute, official document, or official website

    • 11.6. 24/7 contact point for international cybercrime
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      3
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      3
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      0
      3
      Criteria

      The government has designated an international 24/7 point of contact for assistance on cybercrime and electronic evidence.

      Accepted references

      Official website, legal act or statute

  • 12. MILITARY CYBER DEFENCE
    4
    6
    6
    6
    6
    6
    6
    6
    4
    6
    4
    6
    4
    6
    6
    6
    2
    6
    6
    6
    6
    6
    6
    6
    4
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    6
    6
    4
    6
    4
    6
    6
    6
    2
    6
    2
    6
    2
    6
    4
    6
    4
    6
    4
    6
    4
    6
    4
    6
    4
    6
    6
    6
    4
    6
    4
    6
    2
    6
    6
    6
    6
    6
    4
    6
    4
    6
    4
    6
    4
    6
    2
    6
    2
    6
    2
    6
    2
    6
    6
    6
    2
    6
    4
    6
    2
    6
    2
    6
    4
    6
    6
    6
    4
    6
    4
    6
    4
    6
    0
    6
    2
    6
    0
    6
    6
    6
    0
    6
    0
    6
    2
    6
    0
    6
    2
    6
    2
    6
    4
    6
    2
    6
    0
    6
    0
    6
    0
    6
    2
    6
    2
    6
    2
    6
    2
    6
    0
    6
    2
    6
    4
    6
    4
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    2
    6
    2
    6
    0
    6
    4
    6
    4
    6
    0
    6
    2
    6
    0
    6
    2
    6
    4
    6
    4
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    2
    6
    0
    6
    2
    6
    2
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    2
    6
    0
    6
    0
    6
    2
    6
    0
    6
    4
    6
    0
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    2
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    0
    6
    • 12.1. Military cyber defence capacity
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Armed forces have designated units responsible for the cybersecurity of military operations and/or for cyber operations.

      Accepted references

      Legal act, statute, other official document or official website

    • 12.2. Military cyber doctrine
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      The tasks, principles, and oversight of armed forces for military cyber operations are established by official doctrine or legislation.

      Accepted references

      Legal act, official doctrine, or official website

    • 12.3. Military cyber defence exercises
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      2
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      2
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      0
      2
      Criteria

      Armed forces have conducted or participated in a cyber defence exercise or an exercise with a cyber defence component in the past three years.

      Accepted references

      Official website or official document