GCRI · Cybersecurity and Digital Resilience
Released maps
Maps of Cybersecurity and Digital Resilience are published here once their data rights are cleared and they have been reviewed. Each shows its time and space reference, its sources and its uncertainty.
01Sequence
The order things happen in.
- 01QuestionNational, regional or institutional priority
- 02EvidenceSTEM foundation of the platform
- 03BuildFoundry
- 04OrganiseNexus ecosystem
- 05TestUniverse (independent site)
- 06PublishReports
- 07DecideCompetent authorities and institutions, through NXS-RLS (participants, agreements and handoffs)
- 08RenewCorrections and the next annual agenda
02What is shown
Released, referenced and rights-cleared.
- Time and space reference for every view.
- Sources and licence.
- Uncertainty and known limits.
- Version and date of release.
03Geography
Connected activity worldwide.
Night lights, population density and true-colour imagery across the world, from NASA GIBS. Each layer carries its own date.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 3
Connected activity, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Connected activity, framed on the world.Satellite and model products as NASA publishes them, each with its own date. They are indicators, not assessments of any place.
Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONET · NASA HLS S30Sources and licences
- We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
- VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
- Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
- © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). ODbL
- Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
- Live events: NASA Earth Observatory Natural Event Tracker (EONET); events are indicative and keep their original source links.
- Observed (EO): NASA HLS S30 (contains modified Copernicus Sentinel data 2026). We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
- NASA GIBS: We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
- Optional layers (5 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.
Layers and dates
- Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
- Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
- Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
- True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
- Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
- Enhanced vegetation index, rolling 8 days: MODIS Terra EVI, NASA LANCE · 13 Oct 2026
04Indicators
What a released map in this field would carry.
| Indicator | Unit | Cadence | Evidence label | Topic |
|---|---|---|---|---|
| Assets inventoried | percent of estimated assets | quarterly | Declared | Cyber risk management |
| Critical vulnerabilities past remediation target | count | weekly | Observed | Cyber risk management |
| Accounts with multi-factor authentication | percent of accounts | monthly | Observed | Cyber risk management |
| Known exploited vulnerabilities present | count | weekly | Observed | Cyber risk management |
| Board reporting on cyber risk | frequency per year | annual | Declared | Cyber risk management |
| Estimated loss range for top scenarios | currency range | per assessment | Estimated | Cyber risk management |
| Incidents reported by critical sectors | count by sector | annual | Published statistics | Critical service cyber |
| Internet-exposed industrial control devices | count | monthly | Observed | Critical service cyber |
| Operators with tested manual fallback | percent of operators | per assessment | Reported | Critical service cyber |
| Service outage hours caused by cyber incidents | hours | per incident | Observed | Critical service cyber |
| Security advisories for industrial control systems | count | monthly | Published statistics | Critical service cyber |
| IT and OT network segmentation | percent of sites segmented | per assessment | Declared | Critical service cyber |
| Critical services hosted with a single provider | count | per inventory | Declared | Cloud and third parties |
| Third parties with privileged access | count | quarterly | Observed | Cloud and third parties |
| Cloud misconfiguration findings | count by severity | weekly | Observed | Cloud and third parties |
| Contracts with incident notification and exit terms | percent of critical contracts | annual | Reported | Cloud and third parties |
| Provider outages affecting services | count and hours | annual | Observed | Cloud and third parties |
| Market share of top cloud providers | percent of market | annual | Estimated | Cloud and third parties |
| Accounts using phishing-resistant authentication | percent of accounts | monthly | Observed | Identity and data security |
| Privileged accounts | count | monthly | Observed | Identity and data security |
| Personal data breaches notified to regulators | count | annual | Published statistics | Identity and data security |
| Records exposed in breaches | count | per breach | Reported | Identity and data security |
| Sensitive data encrypted at rest | percent of data stores | per assessment | Declared | Identity and data security |
| Credential exposure in breach datasets | count of organisational accounts | monthly | Observed | Identity and data security |
| Coordinated inauthentic networks removed | count of networks | quarterly | Reported | Information operations |
| Documented foreign information manipulation incidents | count | annual | Reported | Information operations |
| Reach of identified operations | estimated audience | per case | Estimated | Information operations |
| Synthetic media incidents in elections | count | per election | Reported | Information operations |
| Researcher data access under platform rules | count of approved requests | annual | Declared | Information operations |
| Content moderation actions | count by policy | per reporting period | Declared | Information operations |
| Median dwell time | days from intrusion to detection | annual | Estimated | Incident response recovery |
| Mean time to restore critical services | hours | per incident | Observed | Incident response recovery |
| Backups tested for restoration | percent of critical systems | quarterly | Observed | Incident response recovery |
| Immutable or offline backups | percent of critical data | per assessment | Declared | Incident response recovery |
| Incidents reported to national authorities | count by type | annual | Published statistics | Incident response recovery |
| Incident response exercises held | count | annual | Reported | Incident response recovery |
| Products shipped with a software bill of materials | percent of products | per assessment | Declared | Supply chain security |
| Open-source dependencies with known vulnerabilities | count | weekly | Observed | Supply chain security |
| Builds with verifiable provenance | percent of builds | monthly | Observed | Supply chain security |
| Malicious packages reported in registries | count | monthly | Reported | Supply chain security |
| Critical projects with security practices in place | score on a stated checklist | per assessment | Estimated | Supply chain security |
| Time to remediate a critical component vulnerability | days | per event | Observed | Supply chain security |
| Systems with cryptographic inventory | percent of critical systems | per assessment | Declared | Post quantum migration |
| Connections using post-quantum or hybrid key exchange | percent of connections | monthly | Observed | Post quantum migration |
| Products supporting standard post-quantum algorithms | count | per assessment | Declared | Post quantum migration |
| Data with long confidentiality requirements | count of data classes | per assessment | Declared | Post quantum migration |
| Migration milestones met | percent of planned milestones | annual | Reported | Post quantum migration |
| Expert estimates of cryptographically relevant quantum computer timing | probability by period | annual | Estimated | Post quantum migration |
05Process
How the process runs.
Process explorer · Process
Released maps: Layers to published map
7 steps·4 stages·1 gate
Process
Released maps: Layers to published map
Layers enter with their rights, are aligned, analysed and checked for uncertainty, then released after public-safe review; a map is a governed spatial claim.
01 Data
- 01Source layers with their rightsDataset · NXS-GRX (canonical data, provenance and risk)Spatial views of The Global Risks Index (NXS-GRX) products sit under the boundary licence gate. Rights classification sets how a layer may be used.
02 Harmonise
- 02Coordinate reference and boundary versionRecord · NXS-EOP (earth observation and digital twins)The area of interest preserves its coordinate reference system, polygon validity and observation support. Boundary versions are kept.
- 03Harmonise units, variables and timeStepUnit metadata, conversion records and transformation logs are required. Alignment is an evidence event, not hidden preprocessing.
03 Analyse and check
- 04Analyse with a recorded processing recipeModel · GIS teamA processing recipe records parameters, calibration, inputs and output lineage. The analysis methods are named in each product's own record.
- 05Spatial uncertainty checkGateSpatial uncertainty is recorded and affects downstream use. A high-uncertainty polygon may suit internal review, not public-safe release.
04 Publish
- 06Spatial metadata bundleRecordThe bundle records boundary type, jurisdiction, geometry version, projection, resolution, source, time window, uncertainty and access class.
- 07Public-safe release of the mapDecisionThe output record names the redactions, uncertainty and public-safe reviewer. A map is a governed spatial claim, never merely a picture.
Spatio-temporal intelligence · Data protocols: semantic, jurisdictional and temporal intelligence · NXS-EOPDesigned programme process, not a record of operation. No cycle has run and every programme is at service level R0. A gate is a programme decision, never a public-authority approval, certification or deployment authorisation. The pages cited are design doctrine.
06Reading the maps
Cautions that apply to cyber maps.
- Cloud region maps show announced regions, not capacity.
- Cable maps show routes, not traffic.
- Incident maps reflect reporting, not attack distribution.
07Status
Releases appear as they are reviewed.
Analysis runs in Foundry; reviewed releases are listed here.
08Sources
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
09Questions
Questions and answers.
Can I request a map or model?
Write to Contact with what you need and why.
ReportsContribute
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
GCRICybersecurity and Digital ResilienceStrategic SystemsScenario and Stress-Test
- EmailGateway GW-GCRISend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGCRISee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Cybersecurity and Digital Resilience
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.