G-P09 · PROCESS · nationalGCRI dossier · service level R0
GCRICybersecurity and Digital ResilienceIn development
Country applications

Country applications

Country work of Cybersecurity and Digital Resilience, linked to national programmes and the national source register. Country pages show only work that a programme record supports.

Publisher
The Global Centre for Risk and Innovation
Field
Cyber and digital resilience, Critical infrastructure
Status
In development
Service level
R0: information and enquiries

Programme board

Enterprise network · Country applications · Cycle 1 of 4

  • Workstreams active
    7Active
  • Milestones due this quarter
    3Watch
  • Decisions pending with owners
    1Watch
  • Open risks
    4
Quarter review dueGCRI · Cybersecurity and Digital Resilience

Workstreams

by stage

Scoping02
Third-party risk programmeWS-017 · owner: Security operations centre
Post-quantum inventoryWS-370 · owner: National CERT liaison
In delivery02
CSF 2.0 profile, current and targetMilestone M3 · slipping
Identity hardeningMilestone M5 · on plan
Review01
Incident response playbooksIndependent reviewer named
Closed01
OT segmentationClosure note on record

Gates

  1. Requestowner named
  2. Scoping noteboundary
  3. Qualifiedinputs
  4. BuildFoundry
  5. Testcontrolled
  6. Publishwith limits
  7. Decisionauthority

Cybersecurity and Digital Resilience · Programme boardProgramme board, in outline: domain structure with placeholder names and illustrative values, not a record.

01In brief

The short answer.

Cybersecurity and Digital Resilience country applications are the national parts of its work on cyber and digital resilience, each linked to a national programme and the national source register. A country page shows only work that a programme record supports, and the national institutions own the question, the data and the decision.

02Canvas

Scoping to review.

Canvas · scoping to reviewDesign, not a record
Country applications: the policy cycleA problem reaches the agenda, options are formulated and appraised, consultation tests them, the mandate holder decides, implementation and monitoring follow, and evaluation feeds the next agenda. Design of the process, not a record of a run.

Fig.A programme from scoping to the owner's decision. Design, not a record.

03Geography

Connected activity in Europe.

For country applications, in GCRI's spatial-intelligence reading, the map opens on night lights, population density and true-colour imagery with place names and borders from NASA GIBS, framed on Europe; every other NASA layer, live feed and forecast waits in the layer list.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 3

Connected activity, for this page

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

For country applications, in GCRI's spatial-intelligence reading, the map opens on night lights, population density and true-colour imagery with place names and borders from NASA GIBS, framed on Europe; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · © OpenStreetMap contributors · Copernicus Sentinel-2 L2ASources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). CC BY 4.0
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.
  • Context: © OpenStreetMap contributors (ODbL), via NASA GIBS. © OpenStreetMap contributors (ODbL), rendered by NASA GIBS.
  • Observed (EO): Copernicus Sentinel-2 L2A (contains modified Copernicus Sentinel data 2026), Microsoft Planetary Computer
  • Optional layers (35 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
  • Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
  • Enhanced vegetation index, rolling 8 days: MODIS Terra EVI, NASA LANCE · 13 Oct 2026
  • Vegetation greenness (NDVI), rolling 8 days: MODIS Terra NDVI, NASA LANCE · 13 Oct 2026

04Scope

Country applications in Cybersecurity and Digital Resilience.

  1. 01

    Cyber risk management

    Threat exposure, vulnerabilities and controls.

  2. 02

    Critical service cyber

    Cyber-physical lifelines and safety.

  3. 03

    Cloud and third parties

    Concentration and vendor dependency.

  4. 04

    Identity and data security

    Authentication, authorization and privacy.

  5. 05

    Information operations

    Information integrity and digital disruption.

  6. 06

    Incident response recovery

    Detection, containment, restoration and evidence.

05National instruments

The national decisions cyber evidence is prepared for.

InstrumentUsually held byEvidence it needs
National cybersecurity strategyCybersecurity agencyThreat assessment, capability gaps
Critical service dutiesSector regulatorsControls, reporting, testing
National CSIRT operationsCSIRTIncident data, coordination
Cryptographic migration plansGovernment security authoritiesInventories and timelines
06Status

Work is shown as its record stands.

Programmes are listed as exploring, forming, constituted, active, paused or archived. Country and regional entries appear when a programme record supports them.

07Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
Country ownershipThe principle that a country leads its own development policies and strategies and coordinates the actions that support them, set out in the Paris Declaration on Aid Effectiveness.
National portfolioThe set of programmes, projects and evidence a country maintains in the Nexus network, each with its owner, status and records.
Country systemsA government's own budget, procurement, financial management and reporting systems, used by donors when they deliver through them.
Operational technologyHardware and software that monitor and control physical devices and processes.
08Sources

Where this page's references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

09Questions

Questions and answers.

How do I propose work at this level?
Write to contact@therisk.global or a regional desk. A proposal receives a reference.
Cybersecurity and Digital Resilience

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.