G-P09 · PROCESS · mapsGCRI dossier · service level R0
GCRICybersecurity and Digital ResilienceIn development
Released maps

Released maps

Maps of Cybersecurity and Digital Resilience are published here once their data rights are cleared and they have been reviewed. Each shows its time and space reference, its sources and its uncertainty.

Publisher
The Global Centre for Risk and Innovation
Field
Cyber and digital resilience, Critical infrastructure
01In brief

The short answer.

Cybersecurity and Digital Resilience released maps are reviewed map views of cyber and digital resilience, published once their data rights are cleared, each with its coordinate reference, date, sources and uncertainty. Layers draw on sources such as NIST Cybersecurity Framework 2.0. A map shows released, rights-cleared evidence, not a live feed or an official warning.

02Canvas

Scoping to review.

Canvas · scoping to reviewDesign, not a record
Released maps: from layers to a published mapLayers are ingested with their licences, reprojected and harmonised, analysed (overlay, zonal statistics, indices), checked for uncertainty and published as a map with its passport. Design of the process, not a record of a run.

Fig.A programme from scoping to the owner's decision. Design, not a record.

03Geography

Connected activity in World.

For released maps, in GCRI's spatial-intelligence reading, the map opens on night lights, true-colour imagery and population density with night lights tonight from NASA GIBS, framed on World; every other NASA layer, live feed and forecast waits in the layer list.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 3

Connected activity, for this page

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

For released maps, in GCRI's spatial-intelligence reading, the map opens on night lights, true-colour imagery and population density with night lights tonight from NASA GIBS, framed on World; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA/NOAA VIIRS · Copernicus Sentinel-2 L2ASources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). CC BY 4.0
  • MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.
  • Observed (EO): NASA/NOAA VIIRS (Suomi NPP). We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • Observed (EO): Copernicus Sentinel-2 L2A (contains modified Copernicus Sentinel data 2026), Microsoft Planetary Computer
  • Optional layers (35 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
  • Enhanced vegetation index, rolling 8 days: MODIS Terra EVI, NASA LANCE · 13 Oct 2026
  • Vegetation greenness (NDVI), rolling 8 days: MODIS Terra NDVI, NASA LANCE · 13 Oct 2026

04What is shown

Released, referenced and rights-cleared.

  • Time and space reference for every view.
  • Sources and licence.
  • Uncertainty and known limits.
  • Version and date of release.
05Indicators

What a released map in this field would carry.

IndicatorUnitCadenceEvidence labelTopic
Assets inventoriedpercent of estimated assetsquarterlyDeclaredCyber risk management
Critical vulnerabilities past remediation targetcountweeklyObservedCyber risk management
Accounts with multi-factor authenticationpercent of accountsmonthlyObservedCyber risk management
Known exploited vulnerabilities presentcountweeklyObservedCyber risk management
Board reporting on cyber riskfrequency per yearannualDeclaredCyber risk management
Estimated loss range for top scenarioscurrency rangeper assessmentEstimatedCyber risk management
Incidents reported by critical sectorscount by sectorannualOfficialCritical service cyber
Internet-exposed industrial control devicescountmonthlyObservedCritical service cyber
Operators with tested manual fallbackpercent of operatorsper assessmentReportedCritical service cyber
Service outage hours caused by cyber incidentshoursper incidentObservedCritical service cyber
Security advisories for industrial control systemscountmonthlyOfficialCritical service cyber
IT and OT network segmentationpercent of sites segmentedper assessmentDeclaredCritical service cyber
Critical services hosted with a single providercountper inventoryDeclaredCloud and third parties
Third parties with privileged accesscountquarterlyObservedCloud and third parties
Cloud misconfiguration findingscount by severityweeklyObservedCloud and third parties
Contracts with incident notification and exit termspercent of critical contractsannualReportedCloud and third parties
Provider outages affecting servicescount and hoursannualObservedCloud and third parties
Market share of top cloud providerspercent of marketannualEstimatedCloud and third parties
Accounts using phishing-resistant authenticationpercent of accountsmonthlyObservedIdentity and data security
Privileged accountscountmonthlyObservedIdentity and data security
Personal data breaches notified to regulatorscountannualOfficialIdentity and data security
Records exposed in breachescountper breachReportedIdentity and data security
Sensitive data encrypted at restpercent of data storesper assessmentDeclaredIdentity and data security
Credential exposure in breach datasetscount of organizational accountsmonthlyObservedIdentity and data security
Coordinated inauthentic networks removedcount of networksquarterlyReportedInformation operations
Documented foreign information manipulation incidentscountannualReportedInformation operations
Reach of identified operationsestimated audienceper caseEstimatedInformation operations
Synthetic media incidents in electionscountper electionReportedInformation operations
Researcher data access under platform rulescount of approved requestsannualDeclaredInformation operations
Content moderation actionscount by policyper reporting periodDeclaredInformation operations
Median dwell timedays from intrusion to detectionannualEstimatedIncident response recovery
Mean time to restore critical serviceshoursper incidentObservedIncident response recovery
Backups tested for restorationpercent of critical systemsquarterlyObservedIncident response recovery
Immutable or offline backupspercent of critical dataper assessmentDeclaredIncident response recovery
Incidents reported to national authoritiescount by typeannualOfficialIncident response recovery
Incident response exercises heldcountannualReportedIncident response recovery
Products shipped with a software bill of materialspercent of productsper assessmentDeclaredSupply chain security
Open-source dependencies with known vulnerabilitiescountweeklyObservedSupply chain security
Builds with verifiable provenancepercent of buildsmonthlyObservedSupply chain security
Malicious packages reported in registriescountmonthlyReportedSupply chain security
Critical projects with security practices in placescore on a stated checklistper assessmentEstimatedSupply chain security
Time to remediate a critical component vulnerabilitydaysper eventObservedSupply chain security
Systems with cryptographic inventorypercent of critical systemsper assessmentDeclaredPost quantum migration
Connections using post-quantum or hybrid key exchangepercent of connectionsmonthlyObservedPost quantum migration
Products supporting standard post-quantum algorithmscountper assessmentDeclaredPost quantum migration
Data with long confidentiality requirementscount of data classesper assessmentDeclaredPost quantum migration
Migration milestones metpercent of planned milestonesannualReportedPost quantum migration
Expert estimates of cryptographically relevant quantum computer timingprobability by periodannualEstimatedPost quantum migration
06Reading the maps

Cautions that apply to cyber maps.

  • Cloud region maps show announced regions, not capacity.
  • Cable maps show routes, not traffic.
  • Incident maps reflect reporting, not attack distribution.
07Status

Releases appear as they are reviewed.

Analysis runs in Nexus Foundry; reviewed releases are listed here.

08Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
Coordinate reference systemThe definition that ties coordinates to locations on Earth, catalogued with EPSG codes.
Modifiable areal unit problemThe change in statistical results that comes from how areas are drawn and aggregated.
Zonal statisticsStatistics of raster values summarised within boundaries such as districts.
Public-safe releaseA recorded decision on the detail at which a layer may be published without exposing sensitive sites or people.
09Sources

Where this page's references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

10Questions

Questions and answers.

Can I request a map or model?
Write to contact@therisk.global with what you need and why.
Cybersecurity and Digital Resilience

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.