{"id":1118,"date":"2026-11-04T11:41:55","date_gmt":"2026-11-04T11:41:55","guid":{"rendered":"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/"},"modified":"2026-11-04T19:38:32","modified_gmt":"2026-11-04T19:38:32","slug":"full","status":"publish","type":"page","link":"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/","title":{"rendered":"Global Cyber and Digital Systems 2026: complete edition"},"content":{"rendered":"\n<!-- Nexus Reports \u00b7 GCRI \u00b7 https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/ \u00b7 source sha256:2ac44890cc24f9faac66724b6b9be17c26d4645697f02519bf1cc1bca8030771 \u00b7 generated by integrations\/wordpress\/nexus-reports\/build.mjs, never edit this file --><script>window.nexusLiveStrings={\"label\":\"Load the live map\",\"note\":\"Imagery and feeds come from other services (NASA, USGS, OpenStreetMap) and load only when you ask.\"};<\/script><script>(function(){\"use strict\";var n=window,l=document,A=\"nexus.live-map\",K=\"nexus.live-map.reload\";if(n.NXLive){return}var B=[{\"id\":\"gibs\",\"host\":\"gibs.earthdata.nasa.gov\",\"path\":\"^\/(wmts|wms|legends|colormaps)\/\",\"to\":\"\/nx-data\/gibs\",\"credit\":\"NASA GIBS\",\"test\":[\"\/wmts\/epsg3857\/best\/BlueMarble_ShadedRelief_Bathymetry\/default\/GoogleMapsCompatible_Level8\/2\/1\/1.jpeg\",\"\/wmts\/epsg3857\/best\/OPERA_L3_Dynamic_Surface_Water_Extent-HLS\/default\/2026-10-30\/GoogleMapsCompatible_Level12\/3\/2\/4.png\",\"\/wmts\/epsg4326\/best\/ASTER_GDEM_Greyscale_Shaded_Relief\/default\/250m\/0\/0\/0.jpg\",\"\/wmts\/epsg3857\/best\/GOES-East_ABI_GeoColor\/default\/2026-10-31T12:00:00Z\/GoogleMapsCompatible_Level7\/1\/0\/0.png\",\"\/wmts\/epsg4326\/best\/1.0.0\/WMTSCapabilities.xml\",\"\/wms\/epsg4326\/best\/wms.cgi?SERVICE=WMS\\u0026REQUEST=GetMap\\u0026LAYERS=ASTER_GDEM_Color_Index\",\"\/legends\/GPM_Precipitation_Rate_H.svg\"]},{\"id\":\"eonet\",\"host\":\"eonet.gsfc.nasa.gov\",\"path\":\"^\/api\/v3\/\",\"to\":\"\/nx-data\/eonet\",\"credit\":\"NASA EONET\",\"test\":[\"\/api\/v3\/events?status=open\\u0026days=20\",\"\/api\/v3\/events\/geojson?status=open\\u0026days=7\"]},{\"id\":\"usgs\",\"host\":\"earthquake.usgs.gov\",\"path\":\"^\/earthquakes\/feed\/v1\\\\.0\/summary\/\",\"to\":\"\/nx-data\/usgs\",\"credit\":\"U.S. Geological Survey\",\"test\":[\"\/earthquakes\/feed\/v1.0\/summary\/4.5_week.geojson\"]},{\"id\":\"power\",\"host\":\"power.larc.nasa.gov\",\"path\":\"^\/api\/temporal\/\",\"to\":\"\/nx-data\/power\",\"credit\":\"NASA POWER\",\"test\":[\"\/api\/temporal\/daily\/point?parameters=T2M\\u0026community=RE\\u0026longitude=13.4\\u0026latitude=52.5\\u0026start=20261001\\u0026end=20261010\\u0026format=JSON\"]},{\"id\":\"open-meteo\",\"host\":\"open-meteo.com\",\"subs\":[\"api\",\"flood-api\",\"ensemble-api\",\"air-quality-api\",\"marine-api\",\"archive-api\",\"historical-forecast-api\"],\"path\":\"^\/v1\/\",\"to\":\"\/nx-data\/open-meteo\",\"credit\":\"Open-Meteo.com\",\"test\":[\"\/flood-api\/v1\/flood?latitude=52.5\\u0026longitude=13.4\\u0026daily=river_discharge\",\"\/api\/v1\/forecast?latitude=1\\u0026longitude=2\\u0026hourly=temperature_2m\"]},{\"id\":\"metno\",\"host\":\"api.met.no\",\"path\":\"^\/weatherapi\/locationforecast\/2\\\\.0\/(compact|complete)$\",\"to\":\"\/nx-data\/metno\",\"credit\":\"MET Norway\",\"test\":[\"\/weatherapi\/locationforecast\/2.0\/compact?lat=45.2\\u0026lon=8.45\"]},{\"id\":\"oisst\",\"host\":\"coastwatch.pfeg.noaa.gov\",\"path\":\"^\/erddap\/griddap\/ncdcOisst21Agg_LonPM180\\\\.json$\",\"to\":\"\/nx-data\/oisst\",\"credit\":\"NOAA OISST v2.1 (CoastWatch ERDDAP)\",\"test\":[\"\/erddap\/griddap\/ncdcOisst21Agg_LonPM180.json?sst%5B(last)%5D%5B(0.0)%5D%5B(43.5)%5D%5B(7.5)%5D\"]},{\"id\":\"terrain\",\"host\":\"elevation-tiles-prod.s3.amazonaws.com\",\"path\":\"^\/terrarium\/\",\"to\":\"\/nx-data\/terrain\",\"credit\":\"Terrain Tiles (Mapzen, AWS Open Data)\",\"test\":[\"\/terrarium\/3\/4\/2.png\"]},{\"id\":\"ofm\",\"host\":\"tiles.openfreemap.org\",\"path\":\"^\/(styles|planet|fonts|sprites|natural_earth)(\/|$)\",\"to\":\"\/nx-data\/ofm\",\"credit\":\"OpenFreeMap, OpenMapTiles, OpenStreetMap contributors\",\"test\":[\"\/styles\/dark\",\"\/planet\",\"\/planet\/20261029_001001_pt\/3\/4\/2.pbf\",\"\/fonts\/Noto%20Sans%20Regular\/0-255.pbf\",\"\/sprites\/ofm_f384\/ofm@2x.json\"]},{\"id\":\"geoboundaries\",\"host\":\"www.geoboundaries.org\",\"path\":\"^\/api\/current\/\",\"to\":\"\/nx-data\/geoboundaries\",\"credit\":\"geoBoundaries\",\"test\":[\"\/api\/current\/gbOpen\/KEN\/ADM1\/\"]},{\"id\":\"gh-raw\",\"host\":\"raw.githubusercontent.com\",\"path\":\"^\/wmgeolab\/geoBoundaries\/\",\"to\":\"\/nx-data\/gh-raw\",\"credit\":\"geoBoundaries\",\"test\":[\"\/wmgeolab\/geoBoundaries\/9469f09\/releaseData\/gbOpen\/KEN\/ADM1\/geoBoundaries-KEN-ADM1_simplified.geojson\"]},{\"id\":\"gh-media\",\"host\":\"media.githubusercontent.com\",\"path\":\"^\/media\/wmgeolab\/geoBoundaries\/\",\"to\":\"\/nx-data\/gh-media\",\"credit\":\"geoBoundaries\",\"test\":[\"\/media\/wmgeolab\/geoBoundaries\/9469f09\/releaseData\/gbOpen\/KEN\/ADM1\/geoBoundaries-KEN-ADM1_simplified.geojson\"]},{\"id\":\"jsdelivr\",\"host\":\"cdn.jsdelivr.net\",\"path\":\"^\/npm\/(maplibre-gl|h3-js|pmtiles)@[0-9]+\\\\.[0-9]+\\\\.[0-9]+\/dist\/\",\"to\":\"\/nx-data\/jsdelivr\",\"credit\":\"\",\"test\":[\"\/npm\/maplibre-gl@6.9.1\/dist\/maplibre-gl.mjs\",\"\/npm\/h3-js@4.5.0\/dist\/h3-js.umd.js\"]}];var T=[\/(^|\\.)gibs\\.earthdata\\.nasa\\.gov$\/i,\/(^|\\.)eonet\\.gsfc\\.nasa\\.gov$\/i,\/(^|\\.)power\\.larc\\.nasa\\.gov$\/i,\/(^|\\.)earthquake\\.usgs\\.gov$\/i,\/(^|\\.)open-meteo\\.com$\/i,\/(^|\\.)openfreemap\\.org$\/i,\/(^|\\.)openstreetmap\\.org$\/i,\/(^|\\.)cartocdn\\.com$\/i,\/(^|\\.)arcgisonline\\.com$\/i,\/(^|\\.)maplibre\\.org$\/i,\/(^|\\.)protomaps\\.com$\/i,\/(^|\\.)versatiles\\.org$\/i,\/(^|\\.)amazonaws\\.com$\/i,\/(^|\\.)raw\\.githubusercontent\\.com$\/i,\/(^|\\.)media\\.githubusercontent\\.com$\/i,\/(^|\\.)geoboundaries\\.org$\/i,\/(^|\\.)jsdelivr\\.net$\/i,\/(^|\\.)unpkg\\.com$\/i,\/(^|\\.)cdn[j]s\\.cloudflare\\.com$\/i,\/(^|\\.)googleapis\\.com$\/i,\/(^|\\.)gstatic\\.com$\/i];var W=n.nexusLiveStrings?n.nexusLiveStrings:{};var H={label:W.label?W.label:\"Load the live map\",note:\"Some layers of this map come from another service. They load only when you ask.\"};var J=[\"experience\",\"external\",\"optional-content\",\"embeds\",\"media\"];var v=[],f=[],C=0;function z(e,t,r,a){if(typeof e!==\"string\"){return\"\"}if(e.slice(0,8).toLowerCase()!==\"https:\/\/\"){return\"\"}var i=\/^https:\\\/\\\/([A-Za-z0-9.-]+)(?::443)?(\\\/[^?#]*)?(\\?[^#]*)?\/.exec(e);if(!i){return\"\"}var o=i[1].toLowerCase(),s=i[2]?i[2]:\"\/\",R=i[3]?i[3]:\"\";for(var m=0;m<t.length;m++){var h=t[m],L=\"\";if(h.subs){var M=\".\"+h.host;if(o.length<=M.length){continue}if(o.slice(o.length-M.length)!==M){continue}L=o.slice(0,o.length-M.length);if(h.subs.indexOf(L)<0){continue}}else if(o!==h.host){continue}if(!new RegExp(h.path).test(s)){continue}return r+a+h.to.slice(9)+(L?\"\/\"+L:\"\")+s+R}return\"\"}var O=n.location.protocol===\"https:\"?n.location.origin:n.location.protocol===\"http:\"?n.location.origin:\"\";var u=typeof n.NX_DATA_BASE===\"string\"?n.NX_DATA_BASE:\"\/nx-data\/\";if(u.charAt(u.length-1)!==\"\/\"){u+=\"\/\"}var D=O!==\"\"?n.NX_DATA!==false:false;function F(e){if(!e){return\"\"}if(typeof e===\"string\"){return e}if(e.url){return String(e.url)}if(e.href){return String(e.href)}return String(e)}function p(e){return D?z(F(e),B,O,u):\"\"}var k={};function oe(e){var t=e.slice(O.length+u.length);return t.slice(0,t.indexOf(\"\/\"))}function j(e,t){var r=oe(e),a=k[r]=k[r]||{req:0,ok:0,fail:0};a[t]++}function se(){try{if(n.localStorage.getItem(A)===\"1\"){return true}}catch(e){}try{return n.sessionStorage.getItem(A)===\"1\"}catch(e){return false}}function $(){var e=n.nexusConsent;if(!e){return null}return typeof e.allows===\"function\"?e:null}function le(){var e=n.nexusConsent;if(!e){return false}if(typeof e.granted!==\"function\"){return false}for(var t=0;t<J.length;t++){try{if(e.granted(J[t])){return true}}catch(r){}}return false}function I(e,t){if(typeof e.features!==\"function\"){return false}try{return e.features().indexOf(t)>=0}catch(r){return false}}function Y(e){var t=n.nexusConsent;if(!t){return false}if(typeof t.switchedOff!==\"function\"){return false}try{return t.switchedOff(e)===true}catch(r){return false}}function b(){var e=$();if(e){var t=I(e,\"map-embeds\")?\"map-embeds\":\"maps\";try{if(e.allows(t)===true){return true}}catch(r){}}return se()?true:le()}function d(e){var t=e?e:\"maps\";if(t===\"map-embeds\"){return b()}return!Y(t===\"globe\"?\"globe\":\"maps\")?!Y(\"maps\"):false}function ce(e){try{var t=new URL(F(e),l.baseURI);if(t.protocol!==\"http:\"){if(t.protocol!==\"https:\"){return\"\"}}return t.origin===n.location.origin?\"\":t.hostname}catch(r){return\"\"}}var Z=0;function g(e){var t=ce(e);if(!t){return false}var r=false;for(var a=0;a<T.length;a++){if(T[a].test(t)){r=true;break}}if(!r){return false}if(p(e)){return!d(\"maps\")}if(b()){return false}C++;Z++;return true}var q=0;function c(){if(q){return}q=setTimeout(function(){q=0;U()},250)}function y(e){setTimeout(function(){try{e.dispatchEvent(new Event(\"error\"))}catch(t){}},0)}var N=n.fetch;if(N){n.fetch=function(e,t){var r=p(e);if(r){if(!d(\"maps\")){C++;c();return Promise.reject(new TypeError(\"Maps are switched off in your privacy choices\"))}var a=e;if(typeof e===\"string\"){a=r}else if(n.Request?e instanceof n.Request:false){a=new n.Request(r,e)}else{a=r}j(r,\"req\");var i=arguments.length>1?N.call(n,a,t):N.call(n,a);i.then(function(o){j(r,o.ok?\"ok\":\"fail\")},function(o){if(o?o.name!==\"AbortError\":true){j(r,\"fail\")}});return i}if(g(e)){c();return Promise.reject(new TypeError(\"Blocked until the live map is loaded\"))}return N.apply(this,arguments)}}var x=n.XMLHttpRequest?n.XMLHttpRequest.prototype:null;if(x){var fe=x.open,ue=x.send;x.open=function(e,t){var r=p(t);if(r){arguments[1]=r}this.__nxLiveUrl=r?r:t;return fe.apply(this,arguments)};x.send=function(){if(g(this.__nxLiveUrl)){c();y(this);return}return ue.apply(this,arguments)}}var w=n.HTMLImageElement?Object.getOwnPropertyDescriptor(n.HTMLImageElement.prototype,\"src\"):null;if(w){if(w.set){Object.defineProperty(n.HTMLImageElement.prototype,\"src\",{configurable:true,enumerable:w.enumerable,get:w.get,set:function(e){var t=p(e);if(g(e)){c();y(this);return}w.set.call(this,t?t:e)}})}}var _=n.Element?n.Element.prototype.setAttribute:null;if(_){n.Element.prototype.setAttribute=function(e,t){if(e===\"src\"){if(this.tagName===\"IMG\"){if(g(t)){c();y(this);return}var r=p(t);if(r){return _.call(this,e,r)}}}return _.apply(this,arguments)}}function Q(e){if(!e){return false}var t=e.tagName===\"SCRIPT\"?\"src\":e.tagName===\"LINK\"?\"href\":\"\";if(!t){return false}var r=e.getAttribute?e.getAttribute(t):\"\";var a=r?p(r):\"\";if(a){_.call(e,t,a);return false}return g(e[t])}if(n.Node){var pe=n.Node.prototype.appendChild,de=n.Node.prototype.insertBefore;n.Node.prototype.appendChild=function(e){if(Q(e)){c();y(e);return e}return pe.apply(this,arguments)};n.Node.prototype.insertBefore=function(e){if(Q(e)){c();y(e);return e}return de.apply(this,arguments)}}var S=n.Worker;if(S?D:false){var ge=\"(function(){var T=\"+JSON.stringify(B)+\",O=\"+JSON.stringify(O)+\",B=\"+JSON.stringify(u)+\",R=\"+z.toString()+',f=self.fetch;if(!f){return;}self.fetch=function(i,o){var u=typeof i===\"string\"?i:(i?(i.url?i.url:String(i)):\"\"),r=R(u,T,O,B);if(r){i=(typeof i===\"string\"?r:(typeof Request!==\"undefined\"?(i instanceof Request?new Request(r,i):r):r));}return arguments.length>1?f.call(self,i,o):f.call(self,i);};})();\\n';var P=function(e,t){if(!(this instanceof P)){return new S(e,t)}try{var r=new URL(String(e),l.baseURI);if(r.protocol===\"blob:\"?true:r.origin===n.location.origin){var a=t?t.type===\"module\":false;var i=ge+(a?\"import \"+JSON.stringify(r.href)+\";\\n\":\"importScripts(\"+JSON.stringify(r.href)+\");\\n\");return new S(URL.createObjectURL(new Blob([i],{type:\"text\/javascript\"})),t)}}catch(o){}return new S(e,t)};P.prototype=S.prototype;try{n.Worker=P}catch(e){}}var V='[data-nx-map=\"ctx-field\"],[data-nx-le],[data-nx-eo],[data-grx-globe],[data-grx-obs],.nx-sb[data-nx-sb]';function ee(){var e=[l];var t=l.querySelectorAll(\"*\");for(var r=0;r<t.length;r++){if(t[r].shadowRoot){e.push(t[r].shadowRoot)}}return e}function G(){return d(\"maps\")?Z>0?!b():false:true}function te(){var e=$();if(e){if(typeof e.enable===\"function\"){if(!d(\"maps\")){try{e.enable(\"maps\",\"site\")}catch(t){}try{e.enable(\"globe\",\"site\")}catch(t){}}if(I(e,\"map-embeds\")){try{e.enable(\"map-embeds\",\"site\")}catch(t){}}else{try{e.enable(\"maps\",\"site\")}catch(t){}}E();return}}try{n.localStorage.setItem(A,\"1\")}catch(t){try{n.sessionStorage.setItem(A,\"1\")}catch(r){}}E()}function me(e,t){var r=e.createElement(\"button\");r.type=\"button\";r.textContent=H.label;r.setAttribute(\"style\",\"pointer-events:auto;min-height:44px;min-width:44px;padding:0 18px;cursor:pointer;font:inherit;font-weight:600;font-size:14px;line-height:1.2;border-radius:2px;border:1px solid var(--nx-border-strong,#8a8a8a);background:var(--nx-text-primary,#111);color:var(--nx-bg-canvas,#fff)\");var a=\"nx-live-note-\"+Math.floor(Math.random()*1e9);r.setAttribute(\"aria-describedby\",a);r.addEventListener(\"click\",te);r.addEventListener(\"focus\",function(){r.style.outline=\"2px solid var(--nx-focus,#4c9aff)\";r.style.outlineOffset=\"2px\"});r.addEventListener(\"blur\",function(){r.style.outline=\"\"});var i=e.createElement(\"span\");i.id=a;i.textContent=H.note;i.setAttribute(\"style\",\"pointer-events:none;font-size:12px;line-height:1.4;padding:3px 7px;border-radius:2px;background:var(--nx-bg-canvas,#fff);color:var(--nx-text-secondary,#333);border:1px solid var(--nx-border-hairline,#bbb);max-width:34em\");t.appendChild(r);t.appendChild(i)}function he(e){var t=e.ownerDocument;var r=t.createElement(\"div\");r.className=\"nx-live-gate\";r.setAttribute(\"style\",\"position:absolute;inset-block-start:10px;inset-inline-start:10px;z-index:6;display:flex;flex-direction:column;align-items:flex-start;gap:6px;max-width:calc(100% - 20px);pointer-events:none;font:inherit\");var a=$();var i=false;if(a){if(typeof a.placeholder===\"function\"){try{var o=t.createElement(\"div\");o.setAttribute(\"style\",\"pointer-events:auto\");r.appendChild(o);a.placeholder(o,d(\"maps\")?I(a,\"map-embeds\")?\"map-embeds\":\"maps\":\"maps\");i=o.childNodes.length>0;if(!i){r.removeChild(o)}}catch(s){i=false}}}if(!i){me(t,r)}return r}function U(){if(!G()){return}var e=ee();for(var t=0;t<e.length;t++){var r=e[t].querySelectorAll(V);for(var a=0;a<r.length;a++){var i=r[a];if(i.getAttribute(\"data-nx-live-gate\")){continue}if(i.closest(\".nx-live-gate\")){continue}var o=i.getBoundingClientRect();if(o.width<120){continue}var s=i.querySelector(\".le-stage,.eo-stage\");if(!s){if(i.hasAttribute(\"data-nx-le\")?true:i.hasAttribute(\"data-nx-eo\")){continue}s=i}i.setAttribute(\"data-nx-live-gate\",\"1\");var R=n.getComputedStyle(s);if(R.position===\"static\"){s.style.position=\"relative\"}var m=he(s);s.appendChild(m);f.push({host:i,wrap:m,stage:s})}}ve()}function ve(){for(var e=0;e<f.length;e++){var t=f[e].stage,r=t?t.querySelector(\".nx-wm-presets\"):null;var a=r?r.getBoundingClientRect():null;if(a?a.height>0:false){var i=Math.round(a.bottom-t.getBoundingClientRect().top+8)+\"px\";if(f[e].wrap.style.insetBlockStart!==i){f[e].wrap.style.insetBlockStart=i}}}}function be(){for(var e=0;e<f.length;e++){try{f[e].wrap.remove()}catch(t){}try{f[e].host.removeAttribute(\"data-nx-live-gate\")}catch(t){}}f=[]}function ye(e,t,r){v.push({name:e,selector:t,fn:r});if(X){try{r(\"on\")}catch(a){}}}function xe(e){for(var t=0;t<v.length;t++){try{v[t].fn(e)}catch(r){}}}function we(){var e=[],t=ee();for(var r=0;r<t.length;r++){var a=t[r].querySelectorAll(V);for(var i=0;i<a.length;i++){var o=false;for(var s=0;s<v.length;s++){try{if(a[i].matches(v[s].selector)){o=true;break}}catch(R){}}if(!o){e.push(a[i])}}}return e}function Se(e){if(C===0){return}if(we().length===0){return}var t=e?\"on\":\"off\";try{if(n.sessionStorage.getItem(K)===t){return}n.sessionStorage.setItem(K,t)}catch(r){return}n.location.reload()}function re(){return!G()}var X=re();var ne=b();function E(){var e=re(),t=b(),r=e!==X?true:t!==ne;ne=t;if(!r){if(!e){c()}return}X=e;if(e){be()}xe(e?\"on\":\"off\");if(!e){c()}try{l.dispatchEvent(new CustomEvent(\"nexus:live-map\",{detail:{granted:e}}))}catch(a){}Se(e)}function ae(){U();if(n.MutationObserver){var e=new n.MutationObserver(function(){if(!G()){return}c()});e.observe(l.documentElement,{childList:true,subtree:true});setTimeout(function(){e.disconnect()},2e4)}}if(l.readyState===\"loading\"){l.addEventListener(\"DOMContentLoaded\",ae)}else{ae()}n.addEventListener(\"load\",function(){setTimeout(U,400)});l.addEventListener(\"nexus-consent:ready\",E);l.addEventListener(\"nexus-consent:change\",E);var ie=0;var Ee=setInterval(function(){ie++;E();if(ie>40){clearInterval(Ee)}},400);n.NXData={url:function(e){return p(e)},table:B,base:u,on:D,stats:function(){return JSON.parse(JSON.stringify(k))}};n.NXLive={allowed:d,blocked:g,grant:te,register:ye,hosts:T.length,data:n.NXData}})();<\/script><style>.pix-dark-mode-switch, .bx-color-mode-toggle, .color-switcher, .page-headline { display: none !important; }<\/style><script type=\"text\/x-nexus\" class=\"_iub_cs_skip\" id=\"nxe-mount\" data-nx-run=\"mount\">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<\/script><script class=\"_iub_cs_skip\" id=\"nxe-boot\">if(typeof window.__nxStill!==\"function\")window.__nxStill=function(){try{if(document.documentElement.hasAttribute(\"data-nx-still\"))return true;if(document.body?\/(?:^|\\s)mdp-readabler-stop-animations(?:\\s|$)\/.test(document.body.className):false)return true;var _=JSON.parse(window.localStorage.getItem(\"readabler\")||\"{}\");return _?_.stopAnimations===true||_.stopAnimations===\"true\"||_.stopAnimations===1:false}catch(K){return false}};(function(){function _(r,i){var f=atob(r),o=new Uint8Array(f.length),e;for(e=0;e< f.length;e++){o[e]=f.charCodeAt(e)}var s=0,a=0,u=0,n=new Uint8Array(Math.max(1024,o.length*6)),t=0;var c=[3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,51,59,67,83,99,115,131,163,195,227,258];var d=[0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0];var m=[1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577];var E=[0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13];var lt=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15];function b(h){while(u< h){if(s>=o.length){throw new Error(\"nx-inflate: truncated\")}a|=o[s++]<< u;u+=8}var w=a%(1<< h);a>>>=h;u-=h;return w}function S(h,w,v){var g=new Uint16Array(16),A=new Uint16Array(16),p=new Uint16Array(v),x;for(x=0;x< v;x++){g[h[w+x]]++}g[0]=0;for(x=1;x<16;x++){A[x]=A[x-1]+g[x-1]}for(x=0;x< v;x++){if(h[w+x]){p[A[h[w+x]]++]=x}}return{count:g,sym:p}}function P(h){var w=0,v=0,g=0,A,p;for(A=1;A<16;A++){w|=b(1);p=h.count[A];if(w-p< v){return h.sym[g+(w-v)]}g+=p;v+=p;v<<=1;w<<=1}throw new Error(\"nx-inflate: bad code\")}function B(h){if(t+h<=n.length){return}var w=new Uint8Array(Math.max(n.length*2,t+h));w.set(n.subarray(0,t));n=w}var q=null,Z=null,k=0;while(!k){k=b(1);var J=b(2),H,F;if(J===0){a=0;u=0;var R=o[s]|o[s+1]<<8;s+=4;B(R);n.set(o.subarray(s,s+R),t);t+=R;s+=R;continue}if(J===1){if(!q){var tt=new Uint8Array(288),nt=new Uint8Array(30);for(e=0;e<288;e++){tt[e]=e<144?8:e<256?9:e<280?7:8}for(e=0;e<30;e++){nt[e]=5}q=S(tt,0,288);Z=S(nt,0,30)}H=q;F=Z}else if(J===2){var G=b(5)+257,et=b(5)+1,xt=b(4)+4,N=new Uint8Array(320),rt=new Uint8Array(19);for(e=0;e< xt;e++){rt[lt[e]]=b(3)}var ht=S(rt,0,19),I=0;while(I< G+et){var $=P(ht),X=0,at=0;if($<16){N[I++]=$;continue}if($===16){if(!I){throw new Error(\"nx-inflate: bad repeat\")}at=N[I-1];X=3+b(2)}else if($===17){X=3+b(3)}else{X=11+b(7)}while(X--){N[I++]=at}}H=S(N,0,G);F=S(N,G,et)}else{throw new Error(\"nx-inflate: bad block\")}for(;;){var y=P(H);if(y<256){B(1);n[t++]=y;continue}if(y===256){break}y-=257;var it=c[y]+b(d[y]),ot=P(F),ut=m[ot]+b(E[ot]);if(ut>t){throw new Error(\"nx-inflate: bad distance\")}B(it);for(var ft=0;ft< it;ft++){n[t]=n[t-ut];t++}}}return i?n.subarray(0,t):new TextDecoder(\"utf-8\").decode(n.subarray(0,t))}if(typeof window.__nxInflate!==\"function\"){window.__nxInflate=_}function K(r){var i=_(r,true),f=i[0]|i[1]<<8|i[2]<<16|i[3]<<24;var o=i.subarray(4+f);function e(s,a){var u=\"\",n=o.subarray(s,s+a);for(var t=0;a>t;t+=8192){u+=String.fromCharCode.apply(null,n.subarray(t,t+8192))}return btoa(u)}return JSON.parse(new TextDecoder(\"utf-8\").decode(i.subarray(4,4+f)),function(s,a){return a?a.$b?e(a.$b[0],a.$b[1]):a:a})}if(typeof window.__nxUnpack!==\"function\"){window.__nxUnpack=K}if(typeof window.__nxLate!==\"function\"){window.__nxLate=function(r,i){if(document.readyState!==\"loading\"){return null}if(!document.querySelector('template[data-nx-libs-last~=\"'+r+'\"]')){return null}return new Promise(function(f,o){document.addEventListener(\"DOMContentLoaded\",function(){var e=i();if(e){f(e)}else{o(new Error(\"nx-late: \"+r))}},{once:true})})}}if(typeof window.__nxAsset!==\"function\"){var U={};window.__nxAsset=function(r,i){if(U[r]){return U[r]}var f=document.getElementById(\"nxe-boot\"),o=[],e=window.NX_ASSET_BASE,s=f?f.getAttribute(\"data-nx-asset-base\"):\"\";if(e){o.push(String(e))}if(s){o.push(s)}o.push(\"\/wp-content\/uploads\/nexus-assets\/\");function a(t){if(!i){return t}return crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(t)).then(function(c){if(\"sha256-\"+btoa(String.fromCharCode.apply(null,new Uint8Array(c)))!==i){throw new Error(\"nx-asset: integrity\")}return t})}function u(t){if(t>=o.length){return Promise.reject(new Error(\"nx-asset: \"+r))}var c=o[t].charAt(o[t].length-1)===\"\/\"?o[t]:o[t]+\"\/\";return fetch(c+r,{credentials:\"omit\"}).then(function(d){if(!d.ok){throw new Error(\"nx-asset: \"+d.status)}return d.text()}).then(a).then(null,function(){return u(t+1)})}var n=u(0);U[r]=n;n.then(null,function(){delete U[r]});return n}}if(typeof window.__nxText!==\"function\"){window.__nxText=function(r){if(!r){return Promise.reject(new Error(\"nx-text: none\"))}var i=r.getAttribute(\"data-nx-asset\");if(i?!r.textContent:false){return window.__nxAsset(i,r.getAttribute(\"data-nx-sri\")||\"\")}return Promise.resolve(r.textContent)}}var j=null;function Q(r){var i=window.NX_RUNTIME||{},f=i.base||window.NX_RUNTIME_BASE||\"\";if(!f||!window.fetch){return Promise.resolve(null)}if(!j){j=fetch(f+\"manifest.json\",{credentials:\"same-origin\",cache:\"no-store\"}).then(function(o){return o.ok?o.json():null}).then(null,function(){return null})}return j.then(function(o){var e=o?(o.files||o)[r.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]:null;return e?e.file?[f+e.file,e.sri||\"\"]:null:null})}function st(r){var i=r.getAttribute(\"data-nx-asset\");if(i?!r.textContent:false){return window.__nxAsset(i,r.getAttribute(\"data-nx-sri\")||\"\").then(function(n){return window.__nxInflate(n)})}var f=r.getAttribute(\"data-nx-src\");if(f?!r.textContent:false){var o=window.NX_RUNTIME||{},e=o.base||window.NX_RUNTIME_BASE||\"\",s=(o.files||{})[f.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]||null,a=[];if(e){a.push([e+f,r.getAttribute(\"data-nx-sri\")||\"\"])}if(s?!!s.url:false){a.push([s.url,s.sri||\"\"])}var u=function(n){if(n===a.length?!a.live:false){a.live=true;return Q(f).then(function(c){if(!c){throw new Error(\"nx-lazy: \"+f)}a.push(c);return u(n)})}if(n>=a.length){return Promise.reject(new Error(\"nx-lazy: \"+f))}var t={credentials:\"same-origin\"};if(a[n][1]){t.integrity=a[n][1]}return fetch(a[n][0],t).then(function(c){if(!c.ok){throw new Error(\"nx-lazy: \"+c.status)}return c.text()}).then(null,function(){return u(n+1)})};return u(0)}return Promise.resolve(window.__nxInflate(r.textContent))}function ct(r){var i=r[0].getAttribute(\"data-nx-on-sight\")||\"[data-nx-map]\",f=null,o=false;function e(){if(o){return}o=true;if(f){f.disconnect()}var a=document.querySelectorAll(\"script[data-nx-on-sight][data-nx-asset]:not([data-nx-run])\"),u=[];for(var n=0;n!==a.length;n++){(function(t){if(t.textContent){return}u.push(window.__nxAsset(t.getAttribute(\"data-nx-asset\"),t.getAttribute(\"data-nx-sri\")||\"\").then(function(c){t.textContent=c;t.removeAttribute(\"data-nx-asset\")},function(){t.setAttribute(\"data-nx-ran\",\"failed\")}))})(a[n])}Promise.all(u.concat(r.map(function(t){return st(t).then(null,function(){return null})}))).then(function(t){var c=t.slice(u.length);for(var d=0;d!==r.length;d++){if(c[d]===null){r[d].setAttribute(\"data-nx-ran\",\"failed\");continue}var m=document.createElement(\"script\");m.className=\"_iub_cs_skip\";m.setAttribute(\"data-nx-runtime\",r[d].getAttribute(\"data-nx-run\"));m.textContent=c[d];(document.head||document.documentElement).appendChild(m);r[d].setAttribute(\"data-nx-ran\",\"true\")}try{document.dispatchEvent(new CustomEvent(\"nexus:lazy-ready\"))}catch(E){}})}function s(){if(o){return}var a=[document],u=document.querySelectorAll(\".nxe-host\"),n=[],t,c;for(t=0;t!==u.length;t++){if(u[t].shadowRoot){a.push(u[t].shadowRoot)}}for(t=0;t!==a.length;t++){c=a[t].querySelectorAll(i);for(var d=0;d!==c.length;d++){n.push(c[d])}}if(!n.length){return}if(!window.IntersectionObserver){e();return}f=f||new IntersectionObserver(function(m){for(var E=0;E!==m.length;E++){if(m[E].isIntersecting){e();return}}},{rootMargin:\"800px 0px 800px 0px\"});for(t=0;t!==n.length;t++){if(!n[t].__nxLazySeen){n[t].__nxLazySeen=true;f.observe(n[t])}}}document.addEventListener(\"DOMContentLoaded\",s);document.addEventListener(\"nexus:runtime-ready\",s);window.addEventListener(\"load\",s);setTimeout(s,0)}var V=document.querySelectorAll(\"script[data-nx-run]\"),C=[],z=[];for(var D=0;D< V.length;D++){var l=V[D];if(l.hasAttribute(\"data-nx-ran\")){continue}if(l.hasAttribute(\"data-nx-on-sight\")){l.setAttribute(\"data-nx-ran\",\"waiting\");z.push(l);continue}if(l.hasAttribute(\"data-nx-src\")?!l.textContent:false){l.setAttribute(\"data-nx-ran\",\"loading\");C.push(l);continue}if(l.hasAttribute(\"data-nx-asset\")?!l.textContent:false){l.setAttribute(\"data-nx-ran\",\"loading\");C.push(l);continue}l.setAttribute(\"data-nx-ran\",\"true\");try{var L=document.createElement(\"script\");L.className=\"_iub_cs_skip\";L.setAttribute(\"data-nx-runtime\",l.getAttribute(\"data-nx-run\"));L.textContent=window.__nxInflate(l.textContent);(document.head||document.documentElement).appendChild(L)}catch(r){l.setAttribute(\"data-nx-ran\",\"failed\")}}if(z.length){ct(z)}if(!C.length){return}var W=window.NX_RUNTIME||{},Y=W.base||window.NX_RUNTIME_BASE||\"\",T=window.__nxMount,O=[];if(typeof T===\"function\"){window.__nxMount=function(r){O.push(r)}}function dt(){if(typeof T===\"function\"){window.__nxMount=T;for(var r=0;r< O.length;r++){try{T(O[r])}catch(i){}}}try{document.dispatchEvent(new CustomEvent(\"nexus:runtime-ready\"))}catch(i){}}function M(r){if(r>=C.length){dt();return}var i=C[r],f=i.getAttribute(\"data-nx-src\")||\"\",o=W.files||{},e=[];if(i.hasAttribute(\"data-nx-asset\")){window.__nxAsset(i.getAttribute(\"data-nx-asset\"),i.getAttribute(\"data-nx-sri\")||\"\").then(function(u){var n=document.createElement(\"script\");n.className=\"_iub_cs_skip\";n.setAttribute(\"data-nx-runtime\",i.getAttribute(\"data-nx-run\"));n.textContent=window.__nxInflate(u);(document.head||document.documentElement).appendChild(n);i.setAttribute(\"data-nx-ran\",\"true\")}).then(null,function(){i.setAttribute(\"data-nx-ran\",\"failed\")}).then(function(){M(r+1)});return}var s=o[f.replace(\/\\.[0-9a-f]{12}(\\.js)$\/,\"$1\")]||null;if(Y){e.push([Y+f,i.getAttribute(\"data-nx-sri\")||\"\"])}if(s?!!s.url:false){e.push([s.url,s.sri||\"\"])}function a(u){if(u===e.length?!e.live:false){e.live=true;Q(f).then(function(t){if(t){e.push(t)}a(u)});return}if(u>=e.length){i.setAttribute(\"data-nx-ran\",\"failed\");M(r+1);return}var n=document.createElement(\"script\");n.className=\"_iub_cs_skip\";n.setAttribute(\"data-nx-runtime\",i.getAttribute(\"data-nx-run\"));if(e[u][1]){n.integrity=e[u][1]}n.onload=function(){i.setAttribute(\"data-nx-ran\",\"true\");M(r+1)};n.onerror=function(){if(n.parentNode){n.parentNode.removeChild(n)}a(u+1)};n.src=e[u][0];(document.head||document.documentElement).appendChild(n)}a(0)}M(0)})();<\/script><div class=\"nxe-host\" data-nxe-embed=\"nr-gcri-editions-gs-13-full\"><div class=\"nxe\" id=\"nxe-nr-gcri-editions-gs-13-full\" data-inst=\"gcri\" data-host=\"gcri\" data-nr-kit=\"true\" data-nr-pub=\"true\" data-theme=\"light\" data-grammar=\"atlas\" lang=\"en\" data-nx-css=\"7L35juvGmif4KpxMGEjZZF5uojacg6quRs000DVT6KppdMN9BgiSQYlOipRJKhcLp15r\/p8nG0QEl9i4BEmlTxXsvNeWQmTs8cW3\/r7H9B0aaW4cgzw2YBiXcZYWxrEwLMeIrknynL7Dm2Gk74Z\/NAKQvoJi\/2jifw51cXHNIxDA\/aMJ0F9TDhP4CkoY7h8t\/E\/zw\/lKSl3015SesleY7x8tgP6q0iwPYW6cQJwncQr3+dEHT\/Z6rdf\/N5+tlfRRoyjzLD3K3rCrN0r4XhqXPD6D\/GP\/GOF\/qF8KGGRpiH8LXfRH\/VYNADjojyoP4wL4CfppG6A\/8hMIApiW+8ct8N1oS5cZRRaVpI+Ws9Wtranb7haNqu5k1T\/DP7JdrMurSYNr9Mf+BIIyfoVs7+vf4vSFXcZLVsTk8a0V7HZVVQG4og2xf4zC0POqkQZ5XMYBSPaPkb31tzYpjdMo2z9utuEOVsOOsuBayEdN1uYRbINN1O6XSw6LAk2ejf9h1rW4+mUCpbsjhBG4JuX+0fbQH\/ta1RJeqOq14gTC7M04h3tTcy\/vmuVd3jXDvrxreCFMHf89b1e6qaE\/q\/6F3UbmmiwRNEBSovV5BfkTe1JWhyBLstwoghM8w70Wgvzl++OIE\/drCEpglOitLw9JfDyVD9+EU0hvB\/oUcuXtKYwA+uNPYeRGbrTmTyEM0V\/PKaynacz5q5+Vnzx6G\/Inj15S+uStbfQnPXn4JED25Flg48Cuk2d7umWtdduxqeHQ5445J+y5o\/vHnzvXRH+Sc8ec4+bcWXADXY87d767dswdf+4Cz97aW\/rcmf7G3q6Zcycbc3UarPV645viuYMm+pOeO7hFf\/JzRxMY7tzRFJI+d173uTPFg9f85PYcuXqf84cOH5\/vf3eGYQy0p0sOI5gXhuSZ1U35aIJrmf11Mv86mX+dzOknc9SFeKvmD00VSIv9w3\/5T\/+k\/XMC37V\/AWmh\/XeQx2iTPejsDw\/6NcYvGAXM40gvPooSno1rrBvgckmgQQr0\/5TE6cs\/geBf8Nd\/zNJSf\/gXeMyg9n\/\/lwe9reDQduOcpRnVjX\/K0gy3hsqLCwig\/vAv\/4hKjf8Gj9cE5A\/6P2RpkSWg0B\/+a+zDHKCBVi82b5EWICjgPrj6cWD48I8Y5k\/ms42nuj4F+X59ea8+GsEpvuzd+nthUZ\/t\/bb57Owtu\/ni7tEqV1\/We7t5JbzmRgSKcm\/Z5rloyvbWlv5qJGgXeaZQZpzBO3q1+QGNhTzNDcgllKcZUrUL0fFNwMfe1LaXdw31i95qz9Z2Ra0CyIHPb4a\/z4EfB+JWePg\/szLjHmkX+V\/BKTsD\/eF\/h\/APoP1znnWsewQ+o70gS0sQpzDfa+k71P6mxSmh3fEf8BDGxQXNkOYnWfBy8LN3VB6nx71WHXI\/ez+8xWF52muWaf50OIP8GKd7zTxcQBjiJ82DD4KXY55d03CvdfKu1E\/sDbA6VNNxjpMP6qnmjFYPoB7vNQttL\/z9DaJTv9dc0zzgIZ2qAut5fUhgWSIadQEB7mSa5WeQHHDLIImP6V4rSpCXB+MN+i9xWbV2zrLyhF4AaRmDJAYFuiDP2R9GVrzzzxxz8FEEIIGk2hymIcxxa9mljM\/xH\/C\/wmPsx0lcfoyiTdrP+rjH9nsfRlkORz8OohLmN\/n6juva\/u0Ec\/h0svSTrZ8c\/eTqp7V+8vSLfk30LNGTWA8TPSz1MNSj+HjNoY531e\/XrIR6iYiqXp4gCPXSz8IPvcz18qSXoV7AALWog7yMgwTq6BmY61GWlTDXU\/Cqh7AEcVLoxfWMblgd6P61LLNULy4g1cP4VS\/OIEl0ciPp8Ly6yfcpHjO\/Y9MshWTrY7JRFVR7Nk5PMI9LvOPab\/zuqsvxPihzkBZRlp+rmgjvAoOM0Gm6lGnxHKfNFjYPZ\/BuVAcP\/xolGSjJZ6UFI3OyujFHxjNN+aGseJiVUhNovsnRKD8SuNfiEiRxoFQF3kKrWxIXTS3qI309rm4cRaNmEZMvdCVECZry17iI\/USthfg83EK9goihbzecUjPt9ib7fbXH7J5RdfmWXUvMo2uIryqyJA5pohlci9WhesTIoqiAJX6y6oyRgzC+FtTC5yNX+xnxp\/VtcmMvhXYOLNe8vLfXBJmH9gxqtnl5H99eRRtuwkWFh1Jmlz3mILlJ4OSU1eAF1fRvg6bUVO5fJcplKZLkEqRikbVYs7Qr5foNRBNv1DRvJk2jgQhvRRrJ5LlblWrgB\/Tz7K1djYqXIIvSc4sjppS9xS3+Fl+jW5wjq+az5cEzf7nbApm9Xi4wD0ABSZWviIdPSyO9nmEeB3utBD7im1FBoSVxGqdH\/FlOA7H4uVKeFYOZmSiB7wf0L+MtB5e9hv59wIyHEZfwXOw1JK3B\/HBEvyL+FHPUS3cIf8+vCexYs2o7YZ69vXvUjlclCE7Y1WVcJpDZj2hb999M9C5yTOkuYreLJWwrw3w27S08k31E1scHCUgDOH4MCQwlXaeOqGcGp771ZI4DEqC4fnvj+3K5jW3HfV7Pa0n7pWqRHjrautOI0de6MoqyBafxdaVZya4Cnsmxs2GLc7FW2AFx+nLr36sc62eQa\/uK5AT0Ufi9PMXBSwqLAp878nPzdHOZm8+2V+9e6uWqK0Qzco7fn+JUK\/KjrwfXPIdp+Q\/oB83xftIx6bwAVLg64C8x4UzxuxoW19shIbF7pUtbkz6qNoN7rGXT1d5h+SF+DYgmbNU5QdR0fJ\/T7hIM1bk0bGEDK73usFTIVXkd5OjSqlk3+hIgYnYC3xUYccIFoQP25YGow2qNdqtuW0KL9t8yPyszSskxbsBhMm6XheXI58Jxz1XC8NhnA3CRsbwygXbsuNu6jnkcflfodStHj99UWNTH1+pNJnoZ74xwNJqJV+wA03ZVV5AlCbgUEBM6\/Im5Dhx0OSo2o5WnW7Mg6EIhKm\/8qWGk\/Kwss\/M4UWXw7roHhy2qxbpZ7FeYYxNF\/TwZnPK0hdS0NbZz\/Gm5aaNUjIKCkB9GmV3Ux7CP4rwokdY8CW8j2FZqKdT32a9FkF3gl4c8e3v4Vm9vx\/2pJggUA7TE4Nj2tF\/Qko1S5FJ6WdVGa9pH6QvMSjAivxhFHEI8HnHPKmgxTvGlGJDVarnsMP1yRs0IchduTCYI0uo\/LI81k+Bc3nFPam3SeJGsR+ezLKHhjpcz3hR3Md4AIklg\/wjWkRMRl5+61N8\/7pxgHYVVKUxhfvxAD0ch9LaALfZRsQ82blUcZVmIng130W4X0oX+\/tGDcONvqsITBEl5wvX6QVQZQZtiVK8J\/KZvfpyF8SvMi7jEfQGbyAlN2Y\/+\/nEThu2o4jTKQVHm16C85hC9G2xCO4Lyn31uToIkPoMSv+YD6DWzUpf7+8fA9dvZyuPiBY9pB7ahSxfyTxK+Kw7IzAIXRPwP\/v4x3Ppu09UoTpHAjF+AkdksRV2O5iwIHbdp4Xq5JHi2giDyI4stxiP13WakRRbEiHyhyoMwdNhinxvSJc9+g0GJHoe7cB1FXLlfL+s8lylqq5qe7zXNN1vV8bd25AlbFQLfMbfiVt1tHMvjturWDQK20N8\/Wqa\/21riVnU3tu8JWzXcuR6MOrYqUxW\/VU0I1nDXuVU9x\/OahRO3KjMn1FZ1tn4YbcWtuvXXQTNb9VaFgbvd7bityjzJbFXXidZQslXBdr2ONuJWZZaC3qrrHTR9Yatarr8FnrBVmYmgtqq\/sSoHDXqrMkOitirTR2qrkufv72f013b+azt\/3nYexzaRvXq6wi8PeBtWWxUNtmZDmm1b+wn5wk\/+Srk1so+lzdU7X9Zevf3VG6Q3q7RZdqvLGmf3u3oX2D0v7QR\/amTd4I+OekfQwZA2T46RrFFyltSbqk+VtLn2LMqabA\/khGbx8ZE3Wh04aZPVqVOx0PLqo27ppha7BRGHkygp4\/Foi+s9pYu18mxoRB5Sk1\/HCulkmeO0KL88oOeqVY4bz9QoCmyHsLCxxDV1vdatnauvLeSaWnk\/xpgAR5EFttV3n6snQN93kRVU32tvTOYh5F5KPFsnjqSTF25HByyv9pztGt1mR9yIbWZw0PNCenC+01SDB7cNmu+NqyndFo4mwf8szSt1zgDFPf1YE6C4vPSoKhV9NZr6aMSNFUVwqOYfwaUr2i9ZXklsHHMQ7tFhBjn+HMO0fNqZITzq1Csr6ou\/0tbrn6iCYLVSHWu3Tby2fpuU4YMndnLvRjIWBbIcwqi4EUdwZGgDfpEl1xLWBniTsr63PkqnOAxhOr6RY2yAW1FmF4MjdLEBdN48tlKq1++o159Zb9BRbyCp9+8a7yPsyvpEG9ud3eV93BFv1Y1kjxQlCF6+PJT5FT5807CHYnt5jndC66815805rPJ7isp7iW6Fnd0SemQu0h5RIzP8hqlsc+mpunaMvaGtguiZBsoyf8IvJMCHyeogtas1w7THuA+M5V1M7G2hZISRmVy+q3iCLOdVgj1c6Oq2nIOLkqcGMcrR1SkZ27CjxwxjXc0WK7maOxLeU1y9ydyoGh9MPHfErWP3bh21CW5stERUAOkH9kid6A95usKey5e+Vvt5AkjzBEjAVLliLh1XIqSuROn1qNaI39GIr\/feaavvf\/cCP6IcnGGhocVPsrdbmd3QDnmBRgiKU+31Y9jud\/EKjNPmOCLHW4UrsHXlpaxtjpInl0AhNpf33j5uvK1SH2v336aHW3OSf+5cx1fWYZH2QPQGRmyZyJanMGSOgitSOdmaupM8rpsKdt5CU772FplyPBwVQ84HMmJfEvgueiMJgVZdwYDj3JbuGenXPDNx6F2TSoeEyBxlHdEB2\/Tm9KF2Ih\/DFqG7TbgE5zQuOV0Ch2RPc2PoaLGlkUy8mmSmzTU8qygWEVMVX77JpMo\/jDgNke+eSzNstmfSbgXY4cZc3K9gUjAg6yYzlj+zZevnihvpcMli5GNhwFeYloWKWMdM9a9EIP82QT6sOKIMeQvl17NffNP2cfGEuSFAilCo26+I4hBJ5cvDf8ohCPFPD99WU2RSgBlvmJ9vXDSbql9yFZIVZmUJw4ley0790xiXZV6DJHJO2sZkHZkVp0TF77h9iXUA7pgmfIa6xjo8MgWZKjAu2aWXAHi1hukcp08OYp\/0ACTBk2War2+agWVE9SZnHISqFqrTOUwAgkc4MF6qrQNWqyrxaD\/BEWSrQi8QyBWeAYpmab8gW0g36aphB3S6sMLiWM2maKLzJR2MSiASzJ4zwranueyx0E0suGO2STPwR7EqPwHBC9a0MqEBE6MlyQqLqpiHh4Nkq8ZpAUsSjmTg4e81A5ERUk685njndLT6g+IjNRR9GoXh5kNzzJ96asIwHSthFgVCNeM2qk5gmV2mRpp5xJdQqbkZfow2fX7NDi\/GSYvjUmYB\/rz38Cd4MLpw2id1weIXdpgQYD4bGzX\/ZklVPjzv8mx68Ky0Wj4Ij3D8ctW7YuS6DUwptbZIdwFFmlzF6Hcv3RgbLRYY5NOIaar6hEmpVa1ZoUiPJ87EGgUYSG1Ey9zwoDyNseaTiAMp7gEfVl\/NoYvnEPHQf7OenbX0curWhetdK6Q+vK9JrP2iJbFkEf6XbTp\/\/1Br6evboDPIr4aI0mXKe6WO\/RrG+ZeHvEwqOa6jq\/pIKWJUZdy4dw9qt0ITrIO3gmbSFGeDF9mWL7IgjRJhdICeccpiP4fgxXjL8lCt1\/sqiIJ04raAKrsMjDikEEDo3S7f64T2Ttnrh9kq8zIwQmHlODOLGKYk2CXWQ4RTqUcgKEcFSPDeQ0s4D3XfDWpkvUx7hYxJFyPSjx8o9a7DXZQj9SldgskYPUold6hzHvjKtAm57xZEBKCa4JoXqO6Ka2Xihdu4uizXnq01Fwqsk9DhdiRDT\/b\/rLr886VUVEtDUoJbGw87yKWIUdVLjYooLm701I\/hOTr3E9GDSCXbaV1rJ0xXfZ9Rr1ATfx\/didDiMLLOCLFACr6jvHWxuvAlTsMvD0UJ0KYKEaoMs+iThJZ1n9ykPH0VsJjE2+IUE1F3jLxfa6R+0n5BosaKkf3rh0xyphJQQkRpDaQQaNRcdqPmAsQKBtOSvkSR9stGKhB9Y76+rVgl+KTYuinC5xLK8XFs+9spLiFm6GAP9l2GGL7yo0tDzhCx6lnt2bLltLtZnc5HlHdXWp5IbO1T+ouzqjebbHPggHLmB4im2JxGwaqW5pGvurvNJFvsBlbrWxK\/UsH4HFacbF+Ml+YmsoioR3t4vpQfM+5XpEsm3lxxCL88lNmllZAo+iKhGdSKk3K84DwlETyDcxheAxga56zmC9F3Fc9B3DF9GqHUp\/Me9FnE09wMLcpyNCK8tsVeI9DESiPS7zl6rD1kL65\/wNTuX+F7OUmhzG43RbsPsbDB9wtIQxjW\/oN\/pilHIqWo2CaxDbhm0k8wuSxh3VMy3y0ODPZrHH67FUGeJYlBS5es3QYbU8vsoiO\/J+0X7F+y8IG\/Mx4rf6YPIEXhhNQZV4AneoVGkWTlVGLcVFBbvCNEaUsUnQVBiELU5I6zLfbZeBZqULhdcWgISh5MgyMR1W3thUjefo3hG8LWfoUa+qj9f\/+v9o+os\/nHg+BA3Pqm1YZJIXxJ0Wmz1wH5no7igzOnxdhVkd8KItTOWNaLNHTMAQI6\/fIAygQUlZsWMI5XNG97G9mrFo7w4VvszMXApjGgsw\/xaQycEP2JaQw2JvobkWXB3CmkWbC8lSQrBJv8gcoKgfI\/uN\/nLAnnuT3Nr1xeN+e6SKPJ2luTVbCNxjfraYrxQFNHS5rbfDf6JU890M4fxrdcdwJczu2pgHGJO8hjXDI7Q4x4kMCzz94sl8HtaM9tQgw4mL\/xmCAExodtLu7rcKNM0EHPpp\/dHGL3u23JSLG26QWjnhZBY25nh0EMH9nWKXo93il6uNpx6NGUmmihdr8ydHd\/AsXTVx50usJ7pZ26VzfOUSuPQ6OE5wvSbKCL+XpOC6xyO4P3J1O3onxVmagRi1SPp77fV6z1ZTyU1wgSy8NmK7prDtYt4D+3aM7mfHLR15IQxMo7SC3VuODGb9L2L3PJZkQwYM8dGWLW04IYeOYoepF3V8uiP5o1giH+ZA4RMlfOYbjwzDL5i4rZwyOigRmtZkTYCXEaEMOIJqfiKCLf\/J7gm505OiTqjtRyiD46Ub5qv+2ifLUo+cPNk1b3mrVk1Y1vfFHGwQsdiIALPg4jlDbY\/7i6AQqYRAtfAJh6MTNgL8u+c9z698U4jWk6QdVtLPOQqP03WAuL5y52p3AnaaSfMN5Mxpo44BHlB\/mWwKgkkXiNImLAP9jaMvGlXQS184HV6q5MxN3WXtrcV+o7Q4cla0Cm2lgjlp6sh9POOvaFoY2MMA0XsTgtPDDBaC3fbzm5YgzkOkcGu2nHuuvxRr\/3PT04Zjbfx7153s5pTrPyCV+T\/0a\/slox9wQo46CeVGzSmwbr+1l9r\/fOPWa3uU6rBAUNtsXkE8wdvhClJp1opPoTut9krZOcrVAGPNOQf6Sq6QGL2e5292ILb\/LL07775fmnH\/d\/D6daengVTNDIPGCU2fGYdARYYPHfXDigdjoeFN3h2c6QVF0ayU93A5cLBDkCHa1TGIrRB2s+yliSfHFhwB2JUN1rbhPyi3Eur7MmSfulnq1qiVnKcI\/0WpJeEK+HKgl04\/Qg5VrarNiivxCV4npef+ZnNDSUvCpDWJRCdkl5sMxU5SZOgrUgPgvuckfzObxAUD7ZOtOP1Xe1CfmaxJyPv7Jmr6nLCEAe9vrbt0EEYZwT6o1dWK\/ntPW1Z7JKUkYEXMAGArtYzVr\/6zOSI9Du3fKcrl2u8dKMWoJb\/LxkWs0q9DqIs74EoyIgGyfxleZNirlne\/fD5DLFXRJDaWWxIL9dizKOPoxGZMSetYYPyzcI0\/b8U3lPDZScUFPEzsFdymGyRLQta2n74bKGmJPwzHjHZhSJpDi9SAN5u\/8w3GVg2cgmxarG0WkxZVZ4ieOAsx6Z+0+xt2+nj9H5KJ1Z6M51c1\/ZxWWCRYlfsBrKZEOsuIpZtyfF+o7ZrVvLVF1hlU8X+iKlAH3TOjaPY70dNdtc8LrhNqs+92JYoD6uX8dswU4ds66sk99\/vJ5SFKiJQPgfT85d3OOZNll39UXQe4eMiR0wt4o5E6e1IoLbjrYIKUKF4dtFQCYdYlqpGXdNNv3xJYdl+aGMM9vn47WVg5x5XXHl8o562+A0q6OV35OutAq9+QLkpmhPJdudPI2y+bxTwfpgDZGSXNafZRknT1RZ13G8YvDy8O1u9nIsciNVH\/Ep8hZTrcrHIVrUBU2nmspgw9j71xHhqq\/nlAzoE\/2jRg74K6df1T+\/dXav38WlYeJkkM4gTfOf0hPJxOC+2H9CX\/D9xTpbHKgeMREj5uf1TwTttVkvZtub72U2vjuiS4ql\/U0z7rV5Lklc3pEYrxlituGJ2fp+1JkMbGClzXs174OUCsgfiWzCK1jGB\/G0bw4ETt1ztJ91o9v3XbTFL\/QRZ+DT7vCOIX7OFd7X+Off4COn4v4XuOK03PP+7uuKyvVtuZ94Rj\/3xsSYAmOoxOc1X\/ngNwzLxr7bvdbV\/Fj09M3ndUt0wPXGqltIbOfb2cgCCFIc11nnrkWlCUjD\/aPt2hs7aAvjcv9oQ8dyNk0ZAumF+0drawELNqU5Ssq5f7QDZ+2aTSnawPtHy7Zcq63gBJJMaD5OX1DaVAij9u2ApDZFYabbKPSo8hwG13z\/uPZ8t0p2S8qjJMtQ6GfkRjtAlacZmtr9o+dvvK3d\/PC7YaKc4NudA6gya\/8IvSDYRlSZvX8EDgj9LVXm7B83UWgFG6rM3T\/aEYA7+l2kChSazkGcotat0I22HltsoXncRMGOLbb3j27kO9QE4WJn\/wh2Oz+K2GJ3\/xg5cEsVF2n2FoEkQc06vuNuTPEna\/\/orddrX\/KTvX\/cuVsn9MWfnP1j4PheZIs\/uftHGMEd3Y0sxl3YgjWwTbbYQsuxAy5gi2000wBS84SLnf2j4wHHt9lid\/+ItgtsmzxBUKImXd+yqd2Ji6394y6wN67FFtv7x9BfAxuyxQ6aVeC6HluMJjuEHmAnAE+0u15vArYYTbK\/cwKXLcZ7LHChxxY7+8fQg9towxa7dR7EtrjMcojaDLfAWQOu3EIz7gHH5srt\/aMNHNPxuHIH7eRNuHG5cnf\/6LmhF7QnoSjw5HqR70DAlKKNHK7p\/Y1KUYueHVQJO+tSB\/XP9ej+FWRi7a27bmfwmICiIHHhlqmT\/5nP2+2KIVDZGxs67q6p318+UKZrc2NuKZr0B8TUb0uteJCBotw\/umBtrnc0pUJD8B1\/67eTX1mcH71gY1PrHWXH\/aMZmKFJrRM25FY5StlSVLHpm4EJKRJ8PJUF3krABuuA\/8HaP24cx9tE\/A82Oktr21vzPzg4VzZwt\/wPLpN+Ff3wCo\/43AAXULcCKkV7ONpG7popxQfVjzzAlDr7R0RSNhZT6u4fdxE0qdaOlwseZ8i0hkqt\/eMatcaW2vtHz\/a31BZFpQ4mkxEwmVLUmg+dsC0FMK\/GZjpsaX1UAFOKKILNjBiVosk0wdZja8AzGe6oPoRXckpc4EQOV4zaMz3XddlitIDmzvS4p539IzR9c8sVoya3YeBTkwGqbeOs1yZTiqdzDbaAKbUR3dy6AVuDs3\/0dwBSVAmVIrLuIfQ3ivQmoJ5Q295y5XhKNy59unG5jamV6wRcOZpW14\/WfP14YqFDTWyQZNcQtWtHDl0PKbf2j26wdtaQK0cb1dn42y1Xji5TG+yoWSTlLiLCIYBUu6eEXCk2oLY7KkVtAg9QGxuV2pgz2FFXBCpFPIQdetQWRqXkOgHUVkOSOJlctOPZYrSacAeorY2L0XXihW4I2GI0s17obCFbjBbU3JjUhEcxuU2iKPQ8jy22UDEwqR2Li21U7IEaEaQuxjvW2Tpc3Xgtd\/7Opxm4LIeY5ka+6UXUD8Upv\/r7x2DHsAGBUYBXkKZg\/xiGwW5D847HHF0Uj74bbncuzVPCkvC6nu3Tmz0wgjy7INrob6m7KTCuuQ9w1uFNZNNM5TkrQBzsH6GzAwG1rEaMyHsQhVtIl\/oAhQjsH7dwu6U5ghI5qOK1jTyfuW7xD4gl2vnuesv\/YGPKYzpCVZgkeZIf8IQ7vgvpCb\/CxIiyoogTwnttAP9reg0SCHLJQPHPp48wz2S8OPoRn1rJnOIf32K0DE6EmuV\/8+MMr7ZD3XjVT0eYSVaDNFdmOThCzBFD+rCSn7PyhO7oDdiwwwRYTFmHa89tN+MFZijNGaHZgKLZ1Q8WYWFd4QdE08wtfZSqH8hdYW6EH8h1YfquStItMT85JdyFmxCEISfcRZtoE61Z4Y7nIYlwBx1oU69Xwh0AvkuxPES4C6LQpmQzItxxtWLhzvKsreWLwp3te4Fvjhfuwq3le6ZEuNuCnQccVrjbBmvL5IS7cOs7FFdEhDvgO37ACndr4LsgYIU70\/I86jKphTuu6Vq428EAQEsQ7lyw24aOINzZludR7dXCnes7YAcF4W4DrAjYUuEu3AXbSC7c+e7Oh3Lhbht6UQClwp0HXJ+6dWjhzl075lYU7vztZk1x0rVwF2581xOFu10QrHdAFO6iHeSLXSQyr8NtIAh3UQgdsBGEu2gDdtRRrIU7iESNSBDu\/K0NnEAQ7taR5VG3cS3cBbswgJEg3O0cP4C2INyt\/d06iAThzo68DSdv41H6DiM41cIdt6Mb4Y7b1Y1wBwPohYEo3HG7uxHuuB1eCXfc3qyEu50drEPIC3cQRlbk8sJd5IL1VhDufNva2r5MuLPXpl7\/f1i+s2xOvousyI4cTr4LHbR1ePluE2xtihWu5DsXuNHaE+S7LdiZuy0r38EN3NKSL5HvMLXdiPIddOEabiTyne1bAaX5aOW7NeIxoUS+A1vXWUcS+Q4GW3obU\/KdD50t4OW7yIYw8Hn5LvDCgGITa\/ku8H1vx8t3jruFbsTLd2a4plVrlXwHQWQHHi\/fAS+kV6GS79ZbEHiAl+9sZ2t6Pi\/fWbYLKW6hku8iP3LCNS\/fRXYQUsx\/Ld9Fu6274+U73\/NMG\/Dy3Wbr0PrLWr6LPLgLLUG+g16w3m1E+S7cbdehIN8B0\/OcnSDfea4TWBEv38EIhtStXsl3geuH1LGv5Ludtd0GJi\/fraO1uQt4+c5xbWsdifJdFEVeEIjyXRSG0XYrynfR1neoSW3kO+hsoL0T5TvfdD2aT6jlu8iN1tR5auS7cBsG1CXbyHe+6\/vBWpTvtv7OpaWwWr7zTG+32QjynWtaa5eX7xx\/bW99Qb6zdhZ1MVXy3RoGO8+WyHcbW5Tv7MCBVBW1fOdEm8hfC\/LdNgosSkvcyHdm4FEjqeW7wF07ji\/Kd17gUndbLd\/BaEtrYWr5Ltyt6cNQy3fAtAIrEOS7dWACE0jkO8v3fAeI8h3wtsBzZfIdJwQ18t0uCCyGmW\/kOyfaRrtIkO+gt4tMU5TvwvUaMuW1fBcEmx3FWFTyHdxBGDkS+S7YBrbvSuS7XeQHgUy+i+zQ3gAV+Y5bhVa+A45tW53ynQdd4Lid8p0wUFq+M82N7dsd8p0wp5R8Z5o7uHGk8t028ELHksp3wmqw8t3G9yK\/S77b4X8E+Q66YRCEEvkuCiOToiCtfBd5wW7nS+Q7uN3RF28r3wXrNXB8iXyHpFXbWRrSVQLe+pcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+JcM+KPIgCqJjtDCvn15yMEbB10kwHs6awbesxL4VkwJFgxXqwnwGBP6XMIcySlD\/eZgSYlMynYbC6Sf1W1CnbqAoigCNqVyTOF668ZPTKqaEMn+yskzU6rHlLa3cvzElKorYt1befXMlOoRxe+tGz0wpWJ8Z\/TWjJ+YUjW5dnrrJo9MqTwOYG\/N8diQKrZacvf11kwemXQqMaPSUzl5QIDxWZs\/TW3NGmrNWrI1e6g1e8nWnKHWnCVbc4dacxdqreazetqrH1lNr94art6aUb09XL09o3pnuHpnRvXucPXulOoR+9ZLW9ADn8AipO9fHvy3++yxuu57bLC67nvsrrrue2ytuu577CtUNzjmd1tLVPe91hLVfa+1RHXfay1R3fdaS2IF6KmcPDC5amuoamty1fZQ1fbkqp2hqp3JVbtDVU8i9ZS6ol8Ma59biluhVCHDTVcPLtk21rMMt4wfW7JdrMIZbhc\/tmS7SDs03Cx6aslW\/XjEHPvxojN8hCPaPMJlV5VoykasK3lwybaxGm64ZfzYUu0i34D+JtETU0gSdkforRo\/MUn7gTwguKp7cIlbr4mVtl5PQSZmWid+E4rNk5dWmsMhIzPcdwiKEww16ZsTOvp778X++zSB7vfeK\/33aWLc772X+e\/ThLffe6\/x36eJbL\/3XuC\/T7u9iTsMVy9GCm92B8JQ4KWzxpFmXJu3OkGE8b7XgiS+tJ5VJH8B2sUgL1RgPGXZHmioaZxtayxItQIEJshxYuY4SaqJQpLpC9xrVVKZf0DHsSpskkQ\/r+sS1I0AYe7guaZLf8sQLDcuVkCIAChhAAT7RxNarlWZUFBhhRBh2o7ttaVBiSN2bXdHlxln8FuGHLh8z6pt9+iXPAPIX8wOGvMxLgXIMhWZkV0bsVGpn4TIfQrYdSRlVWhg6+EarEPPodqESYJcM7bRjupd5V+2iXwnpDuYXdMSmdB8uw6cRsWXLPnA8d5rumb4iuDPH6G53dUOB7iOpDAAiUteA7aYBCpu1wFbHOwfdwD9scUo9AxsIz+aGf3VLBx0YRA5\/MJFdmTBkF24YBdsal8AduHADmx2Eb9wTuQ6LuAXzgosaNvcwnlwY9UGaGbh\/J3vM23ihduADdyuhYWzIy+iu1EtHHC8tRXyCxdsgyAUF87fusAWF86JNk2IN7VwYLv1aq81auHomEFq4Uj\/PsGt86\/F\/dMWdzwlT1HqiSZ9vFI+kepVlLm8xsetkfK8Gtd+LD6\/JUXnN90uFGKFnOt1Xy85xOBMzd2IEr3IcsuQTLpoCG1KJ5wda7ymtjc3wxA2oNrM2RJo\/g6M6QYRmcnOcMnhoQR+Dc6kOqeLJApRuEbS3HiJy8Hc64tktKyHmRXTc6m7\/emGdlu1dEOkN3fLN4Sr\/\/rzbVqGIfx2lWKoyW9iKiU3WQg6k+uOdnJaCqeZ5NQMo4ZjuHDNWl\/e\/2Y9O9xRLEBaKHfm5XXcTrLQtMn2k1el+qYIF5eoQ71LWljeyHDXaLg4V8rfrOetlPZIqPS2NxXMUvS76mrYLuQgQH0jcRHAdZB+vJ1gDlWbTeL0pbhJMmSRatG\/29RYde\/wLWKyOcv4zGaTOqKBaWmHHCbtkMlm+1OAth2f38bGyIPSHFwTRz4iZ1bdE9UWTln2wsjOinTvWhqFNEc2v1g4KU2dQc2jEhS3u8fI2xJRz9i3aHSmmVeYl3EAkjqhJ86vqD6oJolGCZENJYcP35pxSmk1uyGWXyuhU0R703aKtFidM6LUU2\/hJklhJe5uRW45z6ffrOhto7ie+\/Kg+aCAaJNVqc6YewIdeY9FVN94wYkZkythJhflpPAgUuq2QRqqv1nSm2YEoamAR430eoZ5HOy1EvhX5JCfXs\/F+I7lIRGCxjHevY0ib1GUWFi5A0V2zQMGJ7Win8w0HOvDzaevmTbWgexo+GZnMtV5vUn9OinTESc7X\/FjUctPmockq8+Nyj6pnIaFA6w94hQsD99afhXnqzTHI+KPqFwGEtyunj12+YhW5XLc8w7JO8YfGRqg+XwxgiQ+I84SrFbUEz71RB4XL4a\/GplgXNvHxRMeTwBTiJdVJ1\/bzxRqt1Ynusc\/RCeyDzoy2iokzy2MaxobYRa8cNneOJan5XHGgv+vlFedxdv\/KqSg5nQjltJxvSRGmJU3OROBLoBKAV\/nTKf4iW3LT9A59rYdTIVkSeitRMhvGBfoCIYrGXthrlX4i0tiJPAI03AkZ03y7TXstT3MXs9XpCwjvDQj1ehMvkPWGKXq4yaf4n5gTu52GqpuMGPsFXE9uYSLFtalRRWy1OrJOCb0nTpxNIneKJ7YOL0paz8X2Wkye2Azjxt0huxaM9s2rWIxReMLmtuSzI7jKk0P9qmX5djElSEGA6PIMzSLMWPiE4O3CtomfxhxGiIyaKv2oZogXeU1FEWDZAxwuUCQo+u9zlHesvVI5dcQYdtlpW5v8VS\/MxWhB0rzY3fz4te8QLVUpuqJU03E9ykTXgn+\/SLBsqIm23NGyz1pBJ+mJ2eOKvXZOMfpt6\/7NCuf2vGtWmI9Xi\/T14Dof8AQC3NeC0GSFTD8NqXT3AmWEKAERmXFCDS3jE2TGK891luJMm2EQWu7TLrpdhy\/nuIwhOnkGal4WMTVk3k+nb\/pzYyH16z5VhgJ+MiuKPfLNU5C5AGGzoFxys7QgO+XJMvJ2SYlEfh91d49a8UM6wt3azVCBOtJfIsTuSgYaT5pUpEBUzO\/z5zVkc2RmXKpfd+wYu6238Zlmeak+fs1Dv+fLw\/kOyLgryD4MMgETa+nhPm5mF1LAo8gMWi9gWNP2uEdY2RlymVGvGSd9fjZOhWtpC6TkG3LJ2TDe21iQrYRUyyQhGVmeeFq64nuJ2DmXSZFMaX76FlZoF7ptIiZpiQy\/Ugwg47UV49V++htUMI38CEkINM4FRidyG4fxTly1jnFiSSdYUUusa8JZhIqzcrsPIQL9nq\/B1FJn\/Tp7Ea9nph8BCWiyW0Z+srfPa7s7nEn6GlHNr\/0mRvbLNZya2Wo37mBEzu\/O8n07lRmNzjFl7kZK1Edt05pF\/+8UhQh\/ATC8Bv9NfxW2xBagRk9ZLwxSe2JYE+WnMgG3OPJijPYmryg3hQQbcZs+QdLWDSdqBqu\/NPIolVf3mvIOWXJ7pigV3M4nkkqxi8+edwvFRQvISxK45iN93v47VqUcfRhNHb4qhzzFUQB\/o7uCMy5NYrFd9Z4YHIinn1X1Q0VlTLG8ilXLWKfJIkPBi55qwa2Nk3uUjzIbN2cykfux3HA3a6usXY4RAeDvJjORdtFCAq40mktjfyJ7p8mbWJFrRPZysov+aWyeqva1rVTS4ceD\/+6sHKLjPFXZKhEPpxFAcMvD2V+7Qy8q1ow\/GNnT+hHun4bb\/Dl13Ca\/q1ay6kvozX9PLXd8wWZeC\/QAAEiV\/u64rgqaE1x5PsKYYdeoFFkkfgwLuXfwIX1a1lKvZSlukR3XD0Zp697i3xEzpTG295GXqtUyWlvsaFGil6y5kgttWsSJ5a\/Wc9rKekbUoYP02+UIe6alL10u\/ULR3FcE3l1tN7az\/r4R2sHJ6VXCLcuv+7Gd3OP\/SafTrZ+cvSTq1\/0LNGviR4mehjqUXy85nAlNUAqt4ErXt0mukpeoFa8Hp\/jW8Uh1DmQ0dWNTOZ0gTRmTYhpmxq+RhnnleegMkwBPU4v11L\/tQQ+1kB\/W40lRw0VmUeP+IzaOUxAGb\/CyQe9OUWFs6K+rFcSRU+7i+gHu760gExkobHdcMwxX8bdHM0VquaC7R\/M7jP52WInwlJoQtRwSDz2bJbd80xTJRyk4v5aEkcMDITItaUwSeJLERfj+15ckbT3caMouSul5D3ef5Xz27Ab3ueOSfNvI1h2iv8e3wLAgn3RewZbgzh9vMYJRgTf24flG4TpQdy7yj39Sjg3EJRfHlD3Hr7dKDcl1h8JH3Mir45v5ze0llWdlmYRabfv0OHpEQaO3YwIneH3hUJfsmuewo9CLpky435n+4ecFxfiRoZ4HtqBs3GxUR9j7U8yWggX6BxeJfoapq2ojYakfcNu+TXzMKATUpOl5e4PDiZHtpSx5KVhCX2ZPKWzbLhideN8JXqlzelDGS9S0hGPQ34drSoL+wZhZ3YTHxv+wChB5OEBnLNczjS6PNPoKh2bM0yvMi8D4t1UVUwIYACS4AlRBO0X5sCsJK5QJu2OIGEs0CEXqKG9rj3\/meJznD65yMymo8aJ7pMesWe+nvggWAlTZo2Rq2Z4MjXbhN4IbfO4AF\/jCfhYKa5QffZ0tdeWOrlUXbwjs3hdSKZeRiLZy7WVDGiqeF9qSjF3rpSaChLzRAczbgqVFHD8u6xkNaCNW0INx+8lTDqDEwxeKNKpwFciRl+yBVhFXSsYju+lX6YLqd6ZjctzA46UdNFhixIewV3dmYsaeUfxbMQoJmKCSr2pNrzmRgSKcjVJRV4t6yjVs1qNSAx47T4\/FWugWGkddiA\/Dk1QQuciVnJjPf9phqhPkr2NDgwk\/aiXWzI6SuEi049TP\/PlWbqa1ImetYur21bU\/5JLWLHB4nyTntU+zn18C\/GPTF5sGXkZdZEuJ5GMIyWziIa+OHGJx1KXpa7S+C7EJ55KfZgFn0N2wrgIlpS5x29480fZ3GqT9aniL2qQMG7w\/QLScCznNr4FJfGUIQONi\/mS5xp1Rz7gqpOUY3ueofj8Kl\/O2DaKXC4000PnR85ANVW6XWSZMy4AmW6wEP20RhKuTG0zE4aRXJK64o2qK5EgXWlD6lO1N9MkJ4E5wI56wk2LPfUUTB3A5zFXROI2Qi5Y2Bx0oFE8sUKkKfho9l4R5FmS+CCvjYflKU7Vhq79mmcJ\/PJQApR8SUr\/RZanCwJGWJzueXMk9J+aQbk2oY5wbp8z8BlVuSMo0051P7ijmZ9ZylhhtsdcIDOqJ9SzgAkMytGCPr8S84V6jFw4V3+FKxF2J1ZGXhJkWBL3IquXNHs3o7WMcF\/ptKitZUl1U4OGx\/ETcwEpTATCaCpWMHd5LoACYmOs7b0W6cYa31oJlbxakGfv5TQBMk8LEnC+PGHYBt32Xt90Z+te3lfMbU+eWXvomY39etI36KPC2hQlOEKZQVXgIXhBqsOnqH0qPqM0jxragiBpATqCOA8SqHftXLS5aVRyZMPHo24rbq39xORfU8BjDvxDmV2DU2V\/3WsXkBofh8YzRG3H4Ll5jgu0\/xCOzY1uyI\/T4\/iq3rKcCXJg47zNKtrSPDQMo5HlcQ1VdHiLk8QITiBF89k8otg6GsgxidH+v43gjBOkG2E5Y1I2vtkEpHCk0UdwDZdB0NfGk6tfJj3YiDCBrwDfn31eaygOtfzYa8+b8QNCeC356BHR5io8QprxMJlo\/ZGueorsm3CEKxaBYO8WqscBLSfvA9U\/A70ca6WV4hwV+oVxfgZlPJ58qjr2UjNXfOC\/YPkm92E3siMf3\/xsel14vZQGYIxnzoQVQp4s6W15F5+2Ac7Jh1LpTnfvgeERFp2bC+2Otu+VaWrmlkYtypD7u5RaohfkKwzKLDdgFMGgxLUYRQAStIXJw4wWoqI6DKUV1I\/kvd5n1EZYgZJ\/XOCXhyOawrTC+aqGg84GyHN0UD3NnV43Bk+HXVUj3zbFytGVlaU3dlWorcYuh61eeZil8CZfdFUmt6kyPt\/ay0VhwHQaidmOHLiyavroKqcIRzABPkykzEtLCPFHxM0+GWvzJx39a6WhkwCfmpbj9HW1oqOIRgk3ojFplKF+ntnS7nHGlNHseWQoRRiEkvmVYIGFcV6FN2pEbOhWBHU6GDNf7BWrT2wmnUQ3sJcu++Pps1xdhm5R0YOCLGWcnmAel732oVEkmQnTGjYg3dNQjfbKCORfZUjSqmqRhHlqFXQ4vVX7pMc1X2pGxjE67YbGvmHMRjbQ1luN\/sGuf1AblPZ8CvugZkfbXe0aGqfH7COHFu\/J\/zB1rbXnouQUEzJFFWtu2PL2BlRAOfcu3kNkSrkN90G14jS7jfCcX0jvSZp8CW\/d8sMstS2p\/5jcOl3K2VXEwhMzg\/aIVWz4YPWO4UUc9OljeoQKFKOSVPtVlgzyrycByFANH2nGaLxB\/yUucSR1\/RlXjlV2e\/tAPYCUPTjIsUIRFSX3DvB+3queITXPHjyrzsiZnRFHMiPrRYTaLll0SqRY1feowalk1BB490+h3Q38A12bxDmAfaCHE6r0VpRbqNOjaliYkCLZgoSJyNQuo5dnATIVZz0mPJt2Y0fMrGytRhBuik9OynzGroozyQVky8incgjl2ODvOP\/ykJcJAgWhujXOPr0\/ZUX5RNWxYleCuouwtPY\/ngxrdbimMc5m5cdhvNdilDe4VJ45RKBGqgoNDBnI+PcL5835gURHTt1V54rpERoVFYeqc33J8nLkXCN8a2Y389wUBZXNLpI7CvOjQ+DrgtWmtNxTBv0cpzfZvjHW6iwhri+7ljcx0ES9OqIYe4nT8MsDwplqhKBJuTgkleKBtrUyXu4VjWkXrMcJfh5XS\/cIkmTgvHW+6ozTdqb9rZ6L7OoncHrLIQziIs5SvnlmNoQOkF+X6gIoQQHLB4XgGWFFcdaL\/iV15uzDcxZCco0gcrEIsJSsGZCXMALBrLnIUSAA2k6U6xpKJHnM0idTM\/U2SszAt+9KM3HcFv5SfTLNn3QT\/2fOpn6HeRAX4rIssSBFCRA3F86ZqSABV7p7soM3pYc4gP9bDZpBJ3HqttAgkzwileRf4+6LMfEojaXUsBbEKGjHWuVOCnHuJKwWWZxEVk3E6T\/n2RFpx9oVm+2+1NuKOJxFmngDcRmnR1K\/Pr0edDeGA73k0\/PmMLwGMDTOWR0pZFwa45OCq+rgvGHWH6QoawxxJ0GiT5yKnhLGGbyvNJKLRovTKE7jEn7\/\/ncv8CPKwRkW9au3MpN5BZfXPF0pOIT+kWXnIX4PMicEOYH2M9ju6qDmWm+y0fSfFHrW0AJHbbra+Bpp5L3ojrcd5463wAWKu5ddy8t1jD5WdCbeNkpldyBzwYiAhEXyiCHn+DiNZ25R2c8MkhGvxtx5f8Y+FOxL0z040KRJ9A1S5SirTlVs4\/lspB3G5np2JtS4kMWZqQ\/b6LmeTrLQ17W+8v0jRqaRXgbWsMuHAkpSnI4V2zmLbR8ht1dyYIKhUL67HBOeLqk7Gk+i+Djvcp\/TbZ69CahcgouyHEXgU4G0sKU9pp25upAnaE9mBYcBV70zX3++TVGoVm+jQ128gUtrYzbVp2PIhD\/Tyk78G26LYZXVebdp48p2vrlJxXMP+fAIHi7O\/bwcVckzYsGvozJLd9O0TmMBZc8S4H8XmuFLVvSYXwUy6NwB6E0Jq+32Sblu20PbtHwfI+m0\/qAYToJnPzXsp6Vq2QVKBkms3ZLhYauQ4NI6r2XJcBDtUotpJRWIFlFux0ypdEavbuR0FzCJGMQ6ma0CqwcNS\/uZGcBKDrnX8bBC72AJboJZ944RVYh5GRdStBMTS06yWqv1TQsVVELkhSY4i3Ssz9I+EP9A29l7HBlc5SGJ16c3+\/p0+69PTgHBS8S28rqEA7GVPb4BnO\/J+JZfXpXC39CW1ZE3S6VzXmlWlKu0prT70OM9e88S9pFiT26fs7pI46TMPKlVPx54Q\/THHQF\/yeQGZd1A7EVDX6cnmhjDwI1BtVKbdyVv3+XAPLKgWE7+SeL0pdBVGsdZnOWQjorNauA2FIg2BiuAhJp2eIHIwcsmU46q32phXFK\/uzkgxlUvyP4jfRHGeU1DiFO8kF41XxuE9WdbxZulGfhYjJfZ7NQ1oTYcytc9edEQO56CV3U\/cWt16HRcvJMTooKk2MBLK9COyh3jJgXp7AYsZII0xzhvDcTuzxFZ8muqdp12kJGhYBxXdQXvoGPMr6nGIZXby4E2lTkIXmQQAy1sObHksGspmUy1EeF8Eb9WoYkodv7hm8SsUoEBdhF2OXBendtDQUQE+Ut3bCsVJS6Yx1yJe968cDPcF22ccc5kTW52t68g53\/HY97MFHivaW0gXcTQKbeh0nzraFdjFVIKYTiq\/woXZnYcT2VVPdVVjDuOavoKbjWYQ+YpUGpCuN5L4BP\/6CjLyqm6PPbdjitlyLb2I1B0NBCU0V5VIpxHdetW74Agn8AjTMPu4VTsrmDbOnCSvcmupQBgJkUrY5MIdnGd\/REwqkNVx2IHfnadDWJFGifM\/higta4IjQnmwbrpO+0d7bl4G8qEZc\/xcFeOKZgygsXdyuVV9ziXY4dSfmamWiWljcv9yEm7xE17PkCCvOVeP\/JP6UDtRb6YD3jHFC\/p1SxvAumIB31c6zNUQ3hMaTZJB461Kb+PUTJY6T5WZU7bjnQirfTEHUw8r2xjNPRKX4xDWaq0hW+UISXgwA0r5FnZ2MFJRalyQb8JUakL2qZxA5p\/60klTNjYe3kOpFnJ5LHrZjHUfSrgpfiaxLcp+GGKzdTuLff2L6GIR6fVxl1NNKOQkYSwBHFS3O6tWsON1akAR5nIUOA+BpFANjHCsY7LdScg324p4MTaWMHnGT30mGQnDnO\/rx0hqknG2giYT+VX2cqXzeDB1N0gRtD7+34Wfq7tGqngDp5hXEsv4wbZfYQXHP4zdhmhon5N9oxjxw18JH4hh+IXzWa8OJzVgIbYkVxQW1PlgirjM0Qvy84vOp9GlRu58r1sinmrt23i1GPS5LCimMqaBWbYjd\/AKxzUeMgAcIcsE45cC2IPSVVqXf\/a+jb2TomlWK+QhozNKTekcXN+kERMXcBYXpuTzFk26QQ1eXdCqaJaIGqK+a6VKqc9eOHdLAbSyMptUnNukcNSnlLqnF6JAIBuXclb0SIn4FJATO\/wp+kGONyUVp501TfC24jjKZ6MKS5mtS9qXVOZXdQHiOBUy9Of4JutNuRa6TWEuqw8AeFzcOuyvPSIY6rtVBQdoNCfKzJzCeyvWnrBae1XRLHbj2JitWzCxgbwvAdvr3qmcdRQ0r3A86X86IDT77ToK4FC9u7b5fYgWo3XGL6NE79yeIGgfCJ8XZwkesW8Yfs1Zt5Wc8JrUAjEaHVLD07OQO7T6YF5qIOVpoQwEQ4hVQpXGHueFrKsJjCEN6mmaTlFEczzLJ+SQcJuA9hRF+s4QtN2nnFCh5tiKomOvWlF+UF0slCMmOuGdkB7nqSaZnSr6\/byZ7ebqWpzbkjCcFrjNiLQVRtfh3VMtj4bbzNteejZ2ZivJ8WI6Vl6EEZg5hdEISwVglCfklhFmntKhbsuE3jjjKf5GSTLwCoqpCJGFtubwNi3QSeqqc85Lx8ixAsEC7HS3wfRLsj38ftS+1lfIlMIiqqsmBWzOFCgGMwRuuQopFntyOgqbkBK4oCCyzHJGKPwguhiMcXcrU81xqC9qJpBiRiMgI\/su\/BS0LnUFDEEGD3512dJaNf3GfCEtDMi4vVIPkV9oRpR31Vq5AAY53Sup6q2V3JMxim+cvoUBJLRL1W9z788YMc2vJsY0M0ZKJIdsJWVi3XV8jGbPvXyquZOPb7AdJUoXMQLK72gq7gG6qpmUF3JaKkc46erBsxPS8I5OecnVijqyijSujLKsq6O3suepksCkNLifTwnso+Lp30C0uMTyFc6+XTNV6sbq\/vds5IcyIG\/OrCSneyR8d3ADUdgoN0IDLQagdWsoUeAngQNPdLYEnQm15FOI7jrdEoAnQW71enw1zYUkbaQ6zKLmy5qA\/VG2bwSMOOxZZZX9o3n7jU\/jG8zAX4vIPx6UQjnwnzCbaYrSFXLkEDfyHJxSsnaapIcZpf2aYauoIZnwrzqw7fVTZoRBb9inHTE2dOp15q0uMSz1PDhCbzGaAToF0UOznjn1EPTMRCq+r4+F2cyRnj2YRjC8NtNAoPDY0\/JsHSwhoAJNV+iN9pzcSbQAXQniPwkZBRdStHSv\/58u8IewCk4FTRLSPvMwQziMs22zXOhBVc\/Dgwf\/hHD\/OnZ1k3d1K2V5mfliUMYJDVFeUYlcDGlaZr+5xOake9l1j5oHTgi832RhFoikhaVW2Z+Cq8UvpejM4QdxLRkrubNRgy90UorLOprpmYgb1FzJuRmM0KZk+9hSfxQ7Rm1U4LjdMh2zuY+ErBdOehv8WRfS+K23wuqlNnuLKlA9B9lyS2G8EfRgwh\/lDoEtfHHsM3vioFMx\/4sDnfABlXtIBV0NQ7y02nhIxdA9eQ70ZEZa942llEe9GfRAAqTPWz68gbjG2JpXaV4FypeRG8nKM9V2JkJQURSROUDqQ1bC4TXRoOOdwtS8vXh8xmPOkV8jrEuP5\/ezSULMz3wjAUHwofoEALbU1wycqtm6TeKH1l+d5HdIezi8bJTARMYlLfayAAuFwhy5OO\/R+oH5D97oMoImyqmRMfzSBUTszK+HMhHKTAMgVNvj\/uUbDbZm9S8wiFKIMz9hTJZcaBL9nw0IWybqVSPIE6+3QTnyKbgo4HMEML6Guw1TixDlSB7D4jT6V1qnZybdqdaCfiqGa2VKFET2BE+LHKh5moXGirp2KxAR3ljGOqtJeAF0oJ8SBhNc0TS9PawGFvMjW+Za3FC5pnfCgjy4NTVQS4BenNLWJJsd7KoZxYIRHBilTPU9g\/ibUo5YroSv0Zy4+BFif\/Ag6g9BLJ35QUY6\/CEGw+uhejvZKn4O\/2Gs2HMxiMi1aiH9v6GDtvc0N7fjnWCPI5BMWl+XWLCZ11WrR8NOBZPzm2AC+P9UHublqgQN95WSYOE9Li3fpw7oiMjV1YPcozo5esou1RQg0dxEt9VLVTTQZEqs3qHLwVMQ+WqvnJINQ\/f5LC7KgItdRNd4uDlW3XFmZrFchQTQFr5qtkLvKXnDQk3uwDq5raJL9aOS4djIxycp7ibIvwo8Q3T2eHuKZoPurZEL4iyAL5fQBoKebSFYIqpAj5ykdF+zbMEfnkogf8g6v5dUxUCzYjHWlCLM35h\/NMYE7ANoaog\/Fuk0O9ja7oZRnGuNI2NXTGuCvRmWitVZEc+zAOuBCWPEKrApXw9JM+E4Cw64o4Ylbel4rw8qTKz4r0GGeYlzrT86NCxFqPXabTrGnp0v\/dhlOVQ6RWS3WwWU1qctT2WYZ9Otn5y9JOrX\/RromeJHsXHaw5XMubEVK4dV7m68UG6yvVUPhJAxwBpOlFp6L+WwMfCyrfVWN66OUJzggmKM+GVFLH2WJCfgRCskbh8TNT4eloo1VKgL2haiMzRouSRW1mC0LwMTGtxlnOLs3Oiz8kHPr7vNKs6FZOsii\/51A5r\/m1UWi4KeGJ8Gyi0pfh0Q81CiX7r\/vdzKAN52ijliLksNLRw\/7ba9gVjaqWTUEWRDTDHS8AgSJsnzCm5OP49mLIQZcuypLgXoKv9Y10cETjfCQkeceydSPDTYLUde+zx\/ZOh3+91ummI94VOLKqSszZHIMFoX9KRhnGBvA\/biOAp2FRVu9pzOgOiVUn3h+5QmMzZjDOhTu6l1CQDq4yNusI72DTRd8J+eMNB5wH7rjoNFLr0zpYpueztVs5Od2bxUtuX0pplEV8TNsWoym3bVRHDxCCeUcoJDZuBn7Bwotve65vuYG9LxmmUPLPGYdIb7\/Wkb5GiQmFRsWulxDN1ogNsXeMsmwpakRIcoQzbXPCYHdK91PfHMQf+ocyuwalSeO+1C0iNj0Mjhk\/o4QISvaEk0uNWNTI2PhPacGrb8e1gd\/2iJ2zZ7HBimbxtpM5FZYbTYScwwk3K5Me3OEmM4IRw6CveA90mCu3O3arJM0wbRZThuNgebtZePOiA7zXk28QoqbrdNhfkxOZ5bzrdCk+1yUGObvicSLXs1NFQwwmRDLVSGyv1L3m9UQtl4qU6fAZmDDXwIRrWsW9UhnnMb+J+\/ExoHGVoCMT3lsnMTOcCiofLJ\/Mdx9A2Die2Uu+NPmde8zM1ROrSbuyX6fjUZIKmuCvbk5Q3\/I+va0KzOUoaXQR+sjhL4d4FXHZUUMd4BNcczdM\/oOYPJJM7vtK5NO3P67oE1RygjYzHQpf+lqG7kBQrI9YXZyQ3B+O33nAOvPG6EHPs2fpxdhaarE\/VW6IGO8zoy+xd3MLS+QqK84+c7LbqnXxaq6mgbuA8Q2FST9bWDOGx9auq9g7ytAV5MdqBuyJPutL66EraK31Jy4Tryu4QVPpdQSq\/x+1GslgJ4S\/95Mf9obRF63430yXzcJJVWFhH65fpXInOL9N6Vm5SIYMLpRspz8RGluoS9l5hcJ8VhfNX6M2M0Jt6nT4h9KbZElNDb5A7BAKWmidliT8P5fKy55i5xZzBrjrU7\/RMf8XZSLPj2GPIHJV+2dRZLQOAPQIFdN5V8V3JD7FXu0yjrneBP7amVgoIqQZ+FxKTSVETP9VOjAb99efbFMkHO3qebos5HlVwP4yf+Xa+65GSM86NDxHgGl8PClDLhMxN102jWURazOwC02ZUnPZ9qit7ccbVdsglihr7SQm5f3QtYPJ6mwZ2jt\/VfH6lFtrZF1CBi0\/qWNQZ+CTLifknpalu+vm1dgIczGwjy+4+tbVFc9pIaic+yo1M9\/DLQ7eJehA2fRn3BNLFXxFF+Nbd0f9l25b9oMCu3IZBoZfpf5gFhQb6s4pREtJM6ZG0thT0ezP92jVZ7gauqkxiJReAnXd51x3vp5UsqK32MO0h7T4ocPacw7QAM7rfz5es0Ce8lsLjNBhUvpYuR142G4t05fmf2oR9V6UbOh\/pDmV1++ZxTiWCN7UzJcPz+BEcs+UyNKhMeH9EFXm8ebtxini24VllbHIS0KWYUar5k2M28oQEYhGCsNds7W+aO0vgnbJbijy4KdHsiXQmEXWwEl8W2x2VeNTuSDtKW2JURbI6G2gEzl8eakliubyjTPWnLI\/\/QBAZHQ3UFrgWS2nR5oM8K4rl0pwiiwYo8\/gdQ74LblvDGgB3pdrSTciWVMALyFFIYU12GljP6RcjaUurE6iKCY+WySEntCQR8jC2aQ0xfKj+axRxCFVSJrUt1Sip+yjOixIZbpLwJtNZmZMcIs5FkF3gIsECjYKacYlxRsIRUBRhDnZqM6TWX2K8OnvC4ujKr4S3Kdm3WA3auJcm7zV1xJcRRgXGRIy2AZ9QzM\/KMjvL1dSTh0Ii3OUX2lsel4gonDN0OJvu5Mmh06wrKmbsKbf+jEh6aojIiblntYQcNUP65U6y2WcykPl\/MsypqxLD1x4S0RdJ7qEkODKJ6dUmNL+wAZRbsZr7l29L0bcdARMc5qA0CGftHIehirAlPVWihz9egIWjR8OsHMOQ8nth2wBM0eyZlGpOUTaGWUmziTHMUSDGR1dk4PwmaEZ3uv172ugkTHBtwFqP9mBn6+Q420ncbC4399EbkvdNkm1PhACINcdVKOYTMrd\/VwPqmMBLD6VSW8tzEat1DNmZZkvcpCJXMSs3477FmlSnekyjfkjz1S\/ND+GWav26DCZmksPyZHdCeuAjFKGHjiziDockMd1QkmXlWDNJJ+\/gqtpJ7hE9LOS1GhdCLFteheXE2bC626zubNGMzqGkceGNAjaoAARanuKUWXXkBDeLFSVDkTPZCsrYKWb5qmmkrxI8qlVrUUQpREQUZSib69RG0pz1rurYyt6wbn\/Atdzm1FR7DeH2E8X7Am4lRPnSa2daXtrvSVWqgphwzUf5W2GPYoai\/qKtbRQBymY9ZPQfjZzsjMPDEpOLUDambmo6EsDBWan6uS7huzQm1anaes09fKgOI719bliZYvdK5jR5o\/101E8vbs7v91WxVkskj62PW3dqX0U\/yYnrjwLZ+Iu+P8XHd6XKG4\/2WRcscp0en0uBB5mRAiiyDwnGwBa5aIkEQ3WsfU8iZz7XkWpE+sQkxLUn5CIZnRveFM0V3SFPqUOtdUYRKJJvFs\/DQqdVIUNyDT50T1BMXU1MWSBbswipNB4wQnZx24r4Rozx2dL+phnWOEaCJFh4snWmT6vZkEgS34lBRG2KB1UF2SlnIdRKPD1UOzBPxKiRgpaBWqlBUWZAq+DN\/LWqr7IrZpFRflzgbc5k9dRb97oFqlEdOMa5kZ2E7rwQ0wBORCgXB3H4ume\/nvS1i+FeJObktdrGLpNbhdqBuX2CTtEV0ibqBuS473+6PoVme9qlNg+KBEM1loG7\/DjUE2Xf79Y9cDSJn1B548Qm2dTTfZNU31+O41jTHMdSoVTaz0IY1WFiwqzi\/ENkBS7On58VWD50WVbg2p9Fr6i4XgOy6DVkid7KzrrowL1wBt\/iPDuDb430q6ti1Sq9oKuqyXTVcCFdVXMwK4c2k0G+3gKTs9lLQH0MxLJgzBsF+Ix\/nwnJkB\/S+Wz8pq5kRq\/B97ic9iatJFN7M0iyAs7UrxFbb3w+w7yIX+E3Sr0axe8wbEHLGvWoS6F7y+HTXt94\/LTw9TQYmjo5yIwfgwQ6kPSzD5NtsnpD2jrBBuxpb4HqF175Dt4am8lpJMDpDdRXF8XM1HzKSmxTyi42DLWFGHns3qxZpsv4C8xbvbqTSCuh18rL1ZJzjA48SeRdLeBKtlGobJ5dUASC2QOjh8oACv7HEwEnYA7qOU6fPGQl17G5BJ9bzcCQGwrACpWzSPHtNo4KCDqCIbLQmde9w\/6i3nOVfO7z9lndWAd06MTaOg6tiLCCEucsoy0e6sAGrfV3WdYyy7QntATPPgxDGH4jB4c7ViuqNCoqVkZYUKIlcLf0jg9fT5pBPPdW+gZhwaru\/Ak9GxXZryAvSRtmuYTJYLJIRaegyi2mhO530mCs0m611ZXqQm8U0swQ+6noehGgIH2NUYRHQLN0m1HP4UoOleKsCVaK3lDwtmzejcNms1HUitfarspiTTyOZUZsifM5toXKrq\/qB+42crtuI+reN9GNjy58rB1HyVOVdNWd8\/O13nRYCNDbbDerWZqbzvaYBDGSBMgzW+AT9dgKSRa7+BY+E4+1mVslnusGP1zqUD2X10IGoVE7kzgnSnMPor25tYW96SJ+i96cXr0t0Ye56SX7RsTaeHjf+iUb0J7H60AGqitg8pX1QFuCl0a1o6NbZSZorRCru84Ng+iPknJantnmSubTfi654v0grrqrzsJIDiVSZ9yqC3O3m1dfY0ShRRWcxatfsKHPJb6JelDBmZM3Ndl4d\/8pUOJ5mVC7mkAcoYxKYfxDuZzXQbwEwoVTH\/RfqrYpCNCTsaDk4mfd\/E\/aL3XrFHLcLEQxfkLJ9xOokNOpCebV3S22nNCD+RqglvWWratrSlcQh2tTkn9fYjFMdmZfkBiCn97T2NHIOMfvT3GqFfnR16UsruaZP+nU\/l\/N7Uby2nW0iBdBzU7j9FsMgseEJG7yPROHyaDwsbrdd9+SPrRCda15w1Uv4ijULSFIKIrdxb\/zdIkul5v6m22LefY7cKPruzGLmCAKVHjDs5C9wxedA4RAADnHqBZONI5tWZADk97uwr6piqgbHE9KhyfFgvf1PgFNOP6So24ubMYzhFl2okDktNjrNTaF9CoYhO9NShTuXv2fT5a5\/ml1x4tKvvPxbY5HgqQgk\/erb\/fAnWwFrTYA8RLkOsBX6vKeDUvppmagzM6HZe64ajq\/t1eCqHe5b6OEBNNs\/X3bw2lS7tGaNBXXsNVxwOplquBuFdekLOicczjgtVKCDmZoXghPl8XFuG\/alWrIcyNOqmrI55RKlD4fO1m9E9dEmqldRI9UDI2c6MhHz80xu\/XLJwLO3g+SNtUdxEGfGgHMTk+NTjEivmNyEyMx1vD4gmsxD2JNSuRqQjPttMmNV7L0haOj8Ga23RgCkAFRr10B5lkBekx07DXL0Fqzi\/S6KzFWgaXMPaLEDPVY3zBog4Op6jjeU7Eo56lc0z0V17aXqVEPo8y\/9Nz8ACgYffOMOa\/B8HZ7mDFwV90bc25P5dz36jYlvblC8DINAzABw7QbGXlC+AOOpidiwXjD\/CW7GP5NXEvFdF8cSpwzF5egHgsGgFPICHQPrDi6LwqxnP4RJ8V9hbqIPDWUUaWDM2DjudWCg\/253O8lu8hu3yk79ZK16Oc8vzqplqVRzS8Zhxd+G7Uii6WDE9on6cponVV35jKls3\/pdY7ZylS5tMnGFVQ8TQDuEL6MBA7OpIWET0z9Pto\/R3FumwhQyVwohZu1tWFLbx8TJ8lYzWzdKaZJrv1+8WUynWUbWSjiElWawleYT0rjMcTRIF58WrYIAcZnKZzpPsa2jT6VX6kCHuDOXoilRmFyM\/D+4zSU3T2jcw220odtSxMdWkpeULhDVQbJTtQZdtduu5Z4kdxZuD+UGUckAnLbk6BB4nrtmMusf3\/MRb2eS7REHKh5l+clasaWnb7L0qUvy74kZQIwicQ3w6Odyn7SDI13KfvEXJfj3Vc5VxE+B6Dg\/YFE9o78gVhzFSf49Ro0oCePIO0bWxe1VWhmgYpnbgMkY\/JOJDopwDnGMMdGbRbKjYT3MJG5lTBDrhR3qmO+k284TV\/7nam7+EUOc2srNw12PtqnT+7PPv2Z8fNjJnWmGDZAoIzTTRb9uFnoHuds+hwsGWUT7knH2JF0kLm2izKHZXCaAbzSPwjjeOvoxiANXKgHk7QbU8x9dSTpLBirPh0mgvBiPTqQC6bcP4DZCKLX5gJntr2rlk5A28feInMudTvA5PJNp56H6REcYfhtRSQnauKoLLYL9IMAJvXQZ2dgSQYPr9QDfi0wKziSi8axbZbWPMz1kx0Y\/\/4EiqcGCwGjg+oNVueKDa9c3RaxZS\/CWy01fgyHW3XZXrLSJku93Li7ZFrqZcwW1\/w2Cv\/TdUX8T0\/doSUqOkw9t85A1WnWyYHmWoFr2bh5ZOu4RxQD0UKy008855ZP7K2GVocptOiftUyg7Ki9Ig+\/u7N1mTHYceotfIjMe5hCqf5Ma0vFhEljcM1DFhyvMChKUMaBxBO0R0yUSYRS0ZG7eUw2SmMvX0YBEOWwpEyiKi0z+tll5VhhEWoFOkkNDdOw0YT1nIQq+noRX\/vBzbr4bGAdqtznb71E\/Z3XgyJQIJJPtBnRgGOkV8Y1mxcE8+xttvu5svSZZ2+LCQAC0+MtpMWlWCqpB4Do7W9i1+ulDkUNTTkFSmCo7l54zqVclqgziG0R5naphUEjIL\/lXx4S+ApRqh\/RnuPNb7DiPrF34e\/XGJb0rd6vBl1EC\/yZ3Z+LkiH3BVeZu8WCJu\/JtKoPi51OJRREvnWdw1AhrvVldg1O2P9GPQP6awzfCu3XPEvgl4cS+A\/fiNcPoQzz3H5ojguTS3IJYZm4O8Mul7dJwfqN4cDwBOGPXx4uCUgfvnEoUxIXcUEzqtBoAlKcoJYFCx6ETOLT47Dq\/H4wqKWw7pu+y+FR5wm6dd2dWGUKc4zkRM6thNXLgfeae1FbOd5M2xG0SABMz3HysZd6yrMJt8nXHK20Qm7biw\/QfRmjHOvzAkAuQZanMBczbXZoRhsnJrlrE+vxTQ3OGtyn47tMJOLODtvyDnfO+2DXDnfNyHZBaq8Rwxk91fbY8dwp5e5FLa2CfPxKB16hseRVZgbAl0\/8ByY99WJn79PhNVGnWHOgyUUbyXxxukDSu9Ux1oi0vVV8zkCuKjG3rEomgu9KC8AKSmNmZijjHpd4UczR0JsHSTJDVNrRJuacKMhA+vF2gjmlEaodbNGOoT4bWR6jVazTmza\/4UOHkfX2Noe332BdKN14SXUT4PsHOdy+wJ6VJg80rEDLHz+7a5VGn8P43Eowz+ZW6eVTVt7YrlJTznXx2TtMsAYal\/Q2OSrtkmpBnAcojKbzku2Y6sZVnR+Fq9Q8qotO4WWhrSvduFwP2U5cEDi2UamzSI\/EflNXA9tpFK1QlaBd+1sWY43MNQ1nuuVdUmLwrWZZgYCnz3FhnOKyXp+Rm0iFucJNYKFNtgmEJubkQruk3DFyFBI8Zm8XtfSedl+wDRMtO2T0VeKFDoqJE9WmYJFseRdpAhbG+aTNMFnbEuxO4y47\/OlsBOmbFvOihwBcy6Ug6c2jTdvtqPc0a2ueK8+Pxc2LzUCmgToQqRFY1se\/fXkoyuxiNKkyiodvAy2oZ5I4xXX+CD+tP52b7BIprD\/91uSZ+ONUf3rJ6k\/l6YfNPdG6RdehyPeKdRHctZCxFr2m46CWDr8ZFyNH7szXt+HAkwUAk8eb6WhsYkqrt+ow3wl2AcrXos+ZWfuFZW5\/1uzVsuhuEkT1Ae8lgt\/p4v6p6ntwgyn88pAgVd0DjaM2Kp7vR15jonBiDXwzVllR00X6lII8z96+NRIWfeGimGiJ6OH0i5VyuUQpFIT4\/nWgLUzIX8ZWtd+DqIT5rRGWHx56k1VQ1Kx2t+IRH6g7ciZ326Fc\/irJyNw4PzTW1yGLu7M6LJFhFoWXak1EP8c45tmbgZlHc1qFX33aor6TOu6aXaL1xCaba5aDVJC1LBoAsdV\/Vn\/Sd+MSIH\/Ar\/61LLO0KjjHY4POOyp4v3WopyhqiB0N0fc6gTIuYL6w+ZVHjWlcv3++FUGeJYkP8ro75SlOD21pP3VX93X9uY1qbhq5VU3T4+a9LxdpCLFhwcvtDvWermf\/1itQDKUrJ0g\/M\/pQWQPmeSJfoFECvxC3hQIVreqQLfQUOS99N0IIL+jgIMtJfbuV2YWLmPGzsszOSsDXTd0DwjgjevuggOhEtpj8TDdwxzA4cbXWpKBT0j6BOEfVrZTn48ShdXXYrghOF89XMPbXtWmKIsmzZcNzT475+chfzVAQ8NcIdUgz16NAwpQ7ARjmyx3WdpDJCWGQ5VXux2saQrya\/E9dhLRe\/YZA4PeaahrgKokOYxrtoMdbxbwvgdVF16qI0tX6FFQs3BzYrvZ0vNwW3KDGu9wP0KlPEnWylmy2yGXifS1HUfdlJ3wS0vgE5RPxyDBXM0xACbwZRgKrVWryfsZVgWQZ1ZOwDJ44CtPOwxahtVSxPhT9uFAAzET1YAK1n\/Xxj+73PoyyHCq9QkQsOfs5vpt7zEU\/nWz95OgXPUv0a6InsR4meljqYahHMUzCApY6iUpaSfEbldvD7aymwugkUKu7dWtDtCYnEU+gNktR3Q6LyAY60OP0ci31KolHndr11xL4WND9thpLQpvTOIdkJlCaMmkMEtp61fVldLRBAg3oj97ZxjEZ\/+xp\/KMwAQqdCF9ug5ZpzHWNnoNWgQ0btXXUqK1hUX8KGwV2XNafLs2nNKnV1mRWqwkjc0E6LuqjW4aO5wCfTQ+eVZaRvXHbzTm+DgH\/ECObsPLvsy04Dx6WYGESqJA0Gc0sigAUWEZBPbEzg5NCD0pQXot5tsFGQBnFzjb25pk9R0dIAFeoUFEa30B1jNyRgvMQ9tyAW9UcrgiPvAoKw0qsLw9FCi7FKSuRP209DHyLhaA4wVBhO+R3BNKcN+pT9jZ4ZVQ8M6OJnoB8QFrTsmRcWj+SMfsJKRCNKC71isPESeEwl7majMFQ9SSJx\/UEe8GyDO7A2SV4Z396BHd9LngKwlFid70U5T2lAu3AE3tJQACF1ItM2jxu\/5MCdsgozZY4VIp74kYRG1mqS+ajlj+8BlN71q1vMDqxMaTeYRkudu+gkD\/JzuHfod1APhNKJoEoY+oQEP8MNt04Jrch+XEWyUM3jeLdPA17vmrrNhoLbgTWrccm02L2h3mvW3lQDh9GsGcYmElOgdVs1giPS8CZVlVqWJDjkOm2\/IXMaiwJyTE6WOW5QwTFE+4TtoTvgxMMXmC4Wg2ei3lsSm\/bhJF5u03wVkVVp7eJoUIJNBKCRMReGMFJzG3hjM9t0eF5PT7VKZoNST707gO6zIlc5DBWk+YOuasbRXCCZ7jXsNeIFoL8ZfzshKCEyiKQQvXlZLpqrdRkKgVOoEzH96or2kC6pUTULW8I9fzH2W3rZreNSV0y73b3yxT9J\/Zv\/OSYzKpvVTRrfpkiTFXuivD4K8JTrHPhuwzVGMYF8BMYyq+K+tchGPfRTGOzdtUbKsTzKD0qSjU0h44HGZlUyz6K8wbEvDkiIC+rf0vPB3kMpmH3Q9M6QwGqM31BTQ30pOsRqfHLsC7TJl0h4cCoFALsQ8LOnCKpsOC+o+1XGvbQe3IQRoTumK9vuoN9Zcc3fAZx2tswBbXV4SI1vrFXZQGUz8wz6nrCBNnwYfkGYToio8odozbRRjxlb+ltVGDDBA0ylwSvgfUGxQUG6JCXcbbXbO1vmiUJHh\/SxzBOmNPNj6SbRGd5zkL45eGYZD46hDVVPubAP7CAAxeQGh+KTSxgyDKULFm4VY1MFx96IckiMA1SGx\/Ti3r1h2uBNiw2+1VLWPtI0b8o2RZRTyr6CiQRb2oh2lR1xxyUvcGJU49f3UAiiYPnBSxKZLQVWnhh6kVC5Eohcs6ao2g4v3zF4i\/WacYlsb2BJFvdXmFQZrkBo6hefaMIQIL4TNK+SiOVb\/4JXOCXhzxOjw\/fvpKAt47WO1eSzI7YOaXuaFWDVTN0isK6NdUqCYfbNZn98Zsq7aCAQQy\/xO4YZctlU9OndXnRPaA8XlTlmBr5YM7L+2HJk4CMjr1RtH3nvjvCVoiZHcQGEUzSM+IQMHX0YVL0ZtOVYktNZwkSWWPYdxX5hkZlA3VFoVsblitLw+HY5qTMqNSu+UTFssN7w6LVk2gSRKtqB8zC+Dn\/I8vOvfF7UkAUZi77knDYq6G8x2pdpYTm7sA+NB8JUOSZy\/HObUaalXA6ILg9BAhuSzwhGBhw7WdWcjE0HFk3Aunih1GsUVtfcZmqSwd9\/PKQZCDE944IzyhA5VfzvMYRz+L8o3KBuqwVOPJ9GOdPeZmsBvtKNaPciqRimOdZ\/vBNjAsTY8HWKociDuFYPQDrYcBKlLyMSWdPY5dgMQhzpGPHGQsH\/UOI9qDVE3Q5Pzgz9AODGkllEel0WwYFATNoaakadfBdxU9xGKBHXJXl2i8TPpcx70HiKPryzQz0Q51KOjIXCkyB4Oyi0Eg+Tnm4C05D\/kEqjWphudzeRNWFtzuvRpEH4+1eQo4G4bRQHCR\/qoR91h1po+D691pMI9JyxxeWdEsDuSfklyb9rEjXAgDxSFiIi\/LGJ0Z7hTkJ9TN8eAKvMVoWRNtBnIqjU+j7+VJ+3EbcCncyzaI9eANIxLwixqULcW7UeUckcNAhUJLokJs9lN1DWY8+OovnZOUXmqna20Pm+ql0tGLf7iLUc0weqI8LW09RleNNWnW8lFFkUTkST9e5vOP4rcnqGpY77umw0LQxu20y5Z9tCIhLwW9oyJvVWd+b91CILihugpOSO8VJSUnldBOigheioY2HfOUgX2baK8zj6APJY51BtFqYlaWSu\/wbBaN\/GPa5OAzZCUhZe9FV+1elRxI1LaU3HV9TjmK01Ai6utyGGmmQRYZlh\/57yWT9jnlnnRFqiq7Du1ahBGhMhj8+vM3sjmk7LBztk+R0EMUw9ECXV9oI+U39zJLEe4P+5HM4jkY255VSSyCf114cC2afqvUy9J7vgIGXqljMw70PMGbMeZx3jMkmTfKz3u1U51QBIrqKcFhG5BBDA02lEFcSQLTsZmDcZ0Y7CSkcwXPtLqwQnFqqPNu4IwtCx2R\/3V75J8oVoK44Z11GCFB0curzd13AbYb17kEYpJaiFajXzmP123ms1YRpYQw60uyXouv8ltOSeaonMIlvnQkxrIl8iq7ICeiTbkA59VoYbhVBNwgoqIcGMFUptUwFL\/iOS2jzRBS\/w1CCrmdb7sbdOp7rCRqI1zfel+n1xJeEr6eOvBpStB4V5dEimnt2Pvbo30WQQ5jexox2PHJLdFFz5scnF8ki053Xm1axq3mnBMRHSmKs+gUy\/1HNoxR3nxywPHKOYHYzDJj9hV4zG70GZqPRa9Cjiug15JUF0Gtg1oVeMwukpq12HkgNzOahyrT94FFlpsPJNMdjDpwMzO4CJzPJ5ju+y6MxaGA2HoMGTcX4RxUwaGCGlPXLgtDAbGkQGjKt1YyRyah6fi8UGtwia7Js9\/T4Ov5MFBo8QWeFzbg4Ck21FYewXMz\/aEgu1bjvgeQirRpJkEkCw4dv+oxaYFEi6QBVw\/dQRXmOTufnAbqQ1n4EQJeqJ38BuiwK6IJm9U8AdKH4lz8D0AVmf4Vx\/8lh3GQJlrTvVzX++4iORszDvOhoUkOzlydGR7O1\/MnR0VxnfsDoaLaHP3p0NOrlnxIdDTPl6GiiXJS6GU92IoLZpLjpsdkxPy8WuhpIpRkFQfnlIYcFRLyudEejuVTY0V2R0OzyyfgB1prS3u25vtX+pjmrPytwuh4VbQEqShC8iBYgD5mATFkE9YEOsVZsuApsRt+dkMsB1Rcqdq9AaJgZUQLKwfTauI163EGeFQXCvR\/fyCdHw6EW1aLhTM2wbPOnWUinw+z98rFvtiwTxCz2SyWYC2bDwVz2pwZz\/QeP4qrX5+4BTDBDycF9OAj3qBrsM9qJmb8i1p7SLI2LvvrBAq8wHxn8+AEJpJ9fsZpgCe8gNT37MEqowjXxWXEQlcZ\/+Liwa7jYQHEQRIc7\/r0CEdR6R2halvZLTBRLOORmP8FyQLnZd\/ZqyMN+isGieJsU6CcomuzJ0Ce4ExUcaqcDwgRkVFqlN7VjcTl5drjcg4qxikPxBuOHkINzBxowNdnjWUy1hjWfdZERllHJOKxg2ypuPK86Ul09hcKduZuIzZaMUo\/9wrKKauQJ33aFrv5OhAKp79Y1XDs\/ywuZAFDdLad5Lb48oBJkqVL2CZHUFWRpAdOyrYzKJ\/u\/bO\/vTU17UOvrnkQaTvPGMLLLOI2YyHtp6+A0Ul\/Ub3+jkv+O3CiHe8DgYbKRHuGtX89gu59C\/bOLll1LfC9x7hLScKppmM6IFaQV71y84sKrptCp48Rgd2cxQ2ByZKyr4y9gpSZiNbfHu9yVqBuVcR4REorlm+M4kBw1fyoEOjqJdw8bqxr5DxU2Vo3pRwwbQ\/5JfvLWSJ3Gu6pmvvSTW2srSsClQFqx6tO9boTST7QAXNDvN5rGMv4RnVq+xbg81A3knFae9DJc3UZr+5TsLwdxgK8wL+MAJHVpmV3UOl2GtOWSu6UG0\/8qqe1eRX2+eH8JmmOXO2z2iPy5wjlwtyrn4N97hGJtSV0waKzWXf6gEYqiyqyOqF4iOrF2PV5GpTgn4LB1cFt2bZeKZVOwZCrEsnGcgK541+qTDv6nBGahqISlArOe0\/eTEcVHWRQClTd+VM74ORYmhd6yDv2YrxsAee8WXvdY12lx2W6ITNYQn6wss\/OoGVAYBQqOGrSEi1eSa3ICBKGnzWAapf8UiIiqXxq6GWnED6tTQJWh3SpmF2+bfC4vvfC5U6oUUUQmdex841h30VC9YM9xwAL6kujkPzb5LwgC8gGJbeQTwvBoP7VP+CANyafi95U6xAdpfPyzqPFbFyp7fTwaSzQHca7SJ3uwlTnVo3ntwMYmu5qvu\/6OXgR5js6yozkKLaIFU5tm9IrQR1yR0LvntUJP0I5RGbvKKE9ZIkkH0HgX9KORzxpVmJUDuP5qleHZZyskc69yxH+\/KY7YVqq9s4+HkdtGpbmXNAtexiyuIvXxs3dd6WlyeFV22fLkqemGSBZcpQODKhJXsXc4i5CA\/LbIje6DfImDEoCLTOVFq+oxhqHJcK12VVItL\/aTG8O9Diihl7Lu4TOaBwJ\/JYRf9yCqqbNYn526W4qz0BHfrxLcT4QVZrFVJJ0iS7KbwFWvvfHCdN2FZkPv+WD9URVVbs6W9fFvyNEZhChkA6\/7yAi8vgo07I1bvB51xE3+rAdZCPVLDvUXP9QLcL7oldvJjVHV\/XeYhyAF+sPfly9xWmSp9n98XGCewCOSIR70fwWn7Az0v89jkOgoWMYoEGye9r\/F50uWlyAt1YcefhQJfI\/B5KFzFUwc+sP\/dYHpfyZVBQ96PROLDrWmLxh1D\/P4Fz2J9TDUw1IvQ7086fj8\/X7NSqhH8bHSUOsnS\/\/\/27v2HsdtJP9VBA8WGOekjqy2PR77ZrDJJJvdy+WBJIe7xVzvgbZoW92y5JXknu4Y+Vz3\/32yQ5GUREqUrZLo7g6QDHa7Ww9WkSJZxXr8iqMGbMf2dmJvp6DYOyH1KfuFPtJlEn+yWVxynnE\/5HVvjRBRG7Y+Gx4Briffk6B3bPDtUYepL22ylUE5xWzOGgAeSJs091FeTemuiKRl3MFD9mg47PX51FTwvl+QVIZ3eKymmnP+85WdOOp9271yJ3TXr0vcLgIR5JXunJgMZQeHiuEfWjHADLfO9GeHt2OAoUQzNTvww5rpxc422GxZAWNuC04FTzVehs2QGuVkYlqFBDMDq2RHkjtljdRwN8YtpWQD32EQ3QHb5HIcgtnuBISrmfFnACYw\/OwX21hLdUyUa\/PDY2gMWNqqmILEFqgvBdpLEof03YBfHdzkf2dkObgZinxYZQrwMARznWzVs6Pa6PzVeu2TlvZBVQUhyR0zPSckhXw1NbZ3\/spl\/y0qJ7jKdfU0Mk82S\/Lam0zs\/H\/u1WQyXNRsBcA1\/LfQnEjUewJrSvSyUhm9dU30ivCGqXCi5zJ9uefKdV3PXZv9u5pquywPXLXL8r28y3BltdIVg8f3Oc3ivVP4WmDxfmabaAQVhXi+MY5ZVfEJyaum6j+S79USBliYYL+Nw6dOsCObQm4Fu429D1bZIaH2feBTKEoJ218Qshqb\/LxpkOZHFvH02btB6YniN5XgfH6pNiKtiJeIRSUmUYlTVGIX6XCKkkP+W1Y+5wvsolzt0OqWw+P2cb+leTBnUcM1v8ou8j\/A5xsGuwDiNkiSzq1pa2P1xfomqS9ST3YkOpCwCnG\/TCi5cz7Fic9lvLhKQhKt6PN2QwjAbFvIQKHVN3ahM78KH8M8fkg+CMLvd8HqjiZcL9WfL9wrd9wSy6pggVH7p6Lksh8pC3N2R18P+M8P4ucX4udsgKADQcin6LjuF1\/+t+d6f+GNe3\/5b9f98ssK5a8GyAEup4Hy8c+zMmA\/OzOQf1MsnXKokR3VzN4TX7TsTv4l+c+3A4SOFW5ZaNF8dDWZLPIr4MaHiQjgZewad6YW16e5FBfXuXV+3jbelHeRJMN2XoSP8PgN7iUxXUkHEm1f4k8fuvTikAyPKrbNfPC3L7+zfgzpg\/UziVLri4QswdqlXh7Yg+\/jLK488jPdxNT6j78VVsDBN5T+Sqwfk3ggGcgWJcXccP+kRMFm\/mQUy2k908zq8UQ7rSf6aT0pAhYfo2xL0yAtggtYdE\/lngTxyW\/dA05LlDnRYUeTYAXqbQTO4uiwS7m0FDEyYLgHOdBeBuVrglkUX\/1Py6nY7bVidXQhhn2tWCddiEmv1UXroooo2d75WY5bkL5m1uvCcg1m7HuS2KDkMsnObsMvhyhgP6PDzi6gpeHuTf7nYXdjf1yFJE0\/ezdgtwbyhUMUKH9Hh93gpu14PD+jFnK3L+fLH4OMHeTW8q5cJ38MMnaQVeFdkWrfxVFcFWeFCDsE7HHmjLUHP\/8FHnZ+optDSJKB\/SGO0jgkqV08U4+bP0QBMOssAz+YWwE8n3XZvOpWcm4HFJLwpstaNdrmoSWfaghhYY5UBbs9cd2hGjNQPFnqBTboBcMOg7m0uaIAR0y\/xNUO6YZGfpeRNNfgoQ2Hp8dQvAlD2GFsTttHOoyNuQYPbTg8Ns4aUC\/t0dWsy6hcbUnqlC6oXP+zC0OY7J4SN2FD0tyW7rIL7wbFlc6K2svm8PAsY1jPRUNo6L9uOxwSf93WD4nf04dDav0ICG8\/f6jJmfqlgT34MYg2fyHRht\/9a5CQTRCJs9U3Xw7swXcBAK3F68z6O\/krDZTD14d\/+5a\/93N8SFbU+iuJSlKnj5Yvn1Uuul80n+Ux9o3uGIs0zlzuFMtx38GACosjCVaZSG08ZHERe5bsSIhbNF22B+m1Cxz+oPU\/VGasyqxuZW1UZlgML0BdFp\/bkBo6bauGDrs6UVS2Dah9U6TaJyj3VKredKH5e1IIbrsYpm\/JOavxv\/2okVaKfJL\/\/pbcHaxv4mwbrMCI+v3AHvw9vzCwv6NB8hhXJRdQwJiUn5Ejnb35edjpIsWfwxbdWoovwEKdP8mqbey3CdTk6elSzad5F7kvvXYBuX\/7hz2yg9xXd6w2ch+WzwuQ+7fkWcxPOrnftNY6dOcZzEC35On1gVvyu9MH7uIO+sBdfE4f+PYnjbj7Yr8PqfXzV7lk+57CMvyOhJtDVAi3ilSDhjBi\/\/KEddL9olR\/x0Jc3kHuKN07JAyNiOq7uJOoll67gKiG1v8Q1VhRrW4mbUQ1LJIXIKrF534JoroD288gkgXlJxXJgubvSSRvgw4ieRucE8lf0XsSkQ1JgpNRT8pj38bbIIrjRL36fQBHMcIiojCy+Qk50AnppyEvSevJiw4Aw83ILtJWeu0C0hZa\/0PaYqWtuk+0kbbyzH8BUld89pcdnyGYfAYZKyj3lbEtu8tpLqMOAmsZaZzMxSb8JY02JNRt1MWO\/CWJNiFBiaMLtS\/cucYb7yZKxnpRMn4ZomQZdRIl0msXECXQ+h+iBCtK1BWsFyWaRfECZIj43oZkyPgyMkQwaUCGjJEyRFB+IhnCk9Ugt7s6V9nkzKct\/CW6W9uKMrKE2cP2IvS+xFP1fL5SwiwpScL8uhke+0w3jtnokCRPwVtt6T37xQ8kSrsAKtzd2FfhYQUJqux5jjJRuQaIGsUlaCyJo8qD+VXl0V18T7UNHvb88rCoDHVMVwT2fmfUFuYsT91lKbsCS6fI4w3WCdnxbxvGm1j6onHZ7x3Zh8EyoZvQ2ZE9e3gdbOB1PmgkydhvO7KvM4rY7uF7ADQvFHV0IMM3oWvWcP47+bhN6Pof7wav1lFC13CmL8hVqxtxgFbsaIn+J85dkInkeI6N6+z8OYCIypce0vk4v8RxgZ01SbP5yHN3Kb9MScqwsSHV3Z+vDstg5SzprwFNXrtXHkuZH4mE+VUScIh3iBCb88z3XfDwOoisNNksS1CF\/MGhNfL+ZDPJuicJq3LC7v\/zQKLssOuDciUGgP+xjdP81wwS8fm4BHmufpXMQr7LO1N5hF0snmtqYNl0Y9V0QyhTDXfjqLwjcAmcILrrMCzWZxyqSYEAGbKcdD+J9846CDMAYGb6WZ7dXb3LbnIoBFHOrfVKKZjZH5bn69SdA9E\/gf0POq+KsjfVoOy1xitM9lX85J68tydskVrRxnx2VMBnHHD93EU0TTmgHrtd4NEUkCXti6Yy6k1wMV4d5ZBD1FTYtFeHBJb4B+jEcKhF0algeXs4Dq+itXMIoID8sQbHgwECVdviU1XoBO8GYt0NbmpfA70iz5EqZomGWCek55PUNrBJNlHqMmGZC4FXe2T4c3OrwDZ\/WBQFIwTgeP63N3PlmlgcXkJCSWcVCP4saonSxAJir6GyQ4HsOEMgO+ZMSgSuGbjjCQqcxT4kAE79N8Q46nE0c3b2D4tiJ1MQ5YtRdBpRNaEIwCp77TL4eVePqZlj8bsIjoNjzt1UZg\/+kIpUlQDhBa6svEfUUWXzK7BvrMA9xfZd+eptDB1mlxHswlnweK6AzOISZwNGfkuTuJwf4xmDkh27mM2PteEAWq0Ou5bN6VNT2vXGuCldkjtb3eNqAtgamlLLUI9arZLQ3pOlG7jpmA\/cDLe66CNN4mr1WPg\/4QJli6CxXBt8rJGnbFl8k5IXIhR8kS1eaO6sMLD+xQoDTaHH\/\/vfQV6dKBHLrLHuEA7Bt6ROjieaW\/SUtQURgdFmSNI5ySGkVWVNzHdWdzHfldx6VQ4ZxFmj3uCKE+cT1brai3XDy+rIUm+22krYxaZGoCTmhDI5b9y6xBQ0AxCT8utTV+IWpjoDvpZV7JlOxTanCTtkxe6dWbP5+ix55TsrRpCtySpL21U1Teiekuw1C2RcB5ktdrwRwDyzXW9YMHLdES0cy\/h7P7hXYas5dDlHK79gqZmcAcvPjvLqGqNkmmjCl8oEVcsImloqrA4FFrv9ouMHHGkF+snZ59mKoB0aVZVLlk4zMa4y0aXb6txl2wybu3zD6dIi24B3FCIH9eX9uDR3ranhiVX0Z74OkryAocxNw7keSwaMjtWetaplidYLGDmY0boKXoUYvQztlK6qyjJ6HzWqCysMcSX0N1x\/eHUxuT6BJysEoFHOUDtn3iabZCldcauQUDtEDYtcBpma6QXNfZ1G1f5mThVI92GQPc2Zh5NqU81Qd9rBHkuS+FOqXV2108QFtQhg4r1cu\/qUCILznLbnYutWa\/xdWv8A1p2gKJHIBuc635TOHvPPVXAVR5\/zJgEsx1mDsjPVVX8zdlRilJuOeUWBqL4HvZxMw0GvwZotQaljaT3w1cpn6NzyFkhFstOOxCjvmiiP5R3R0DREMLeiYZg6no194xr9xrhd3dcTO\/R0jLSzvoDONanhZiWRYPsME9dVJkz3so+eDxRU9R75srXFfjZrOz6qiv4MT3V\/fIo9hJE6f1wZceOLyYMwUHYOx2fcnnhp43amHdX0qlU3DTJHEj\/VqZpMOPfd7dCncc6OyX1o5LodWBCu\/HeD68ENdkdCjn73DYMkvrW9PlYWzgzfyF6xZ80qp9wxusEyPuXdIEsOrDAAV3qNrehtsG9lKp3qlpIZL0aa1YKbGB+NbpUpVlMHF6cebP5s9IjG6dm2a8yV7seZCC2KI\/puwF2192qJBzlMQNwf9iESROu4iQDc69X4ihzg6ab2xe1eJLiu30QBaf\/SEYjoIUtI2EShozvsn+ERPSsNCR92ZNKsYj9IuH1nbvHtdoGLuLhmARck3dNV5rAT19zyRq71ueW9fVMuf+Y78ZgBtgzUaXNmLwrcVmJ7iueL4MRhYyxVUX7W2J4Iowk2gcqIikxLp3Cvsl3BWdLsE6WRkPYebpNnpE44I6+9uouKOZCNeyE5K3dVDbbfFjvy6K6WIHHY72myAtwcg7Nfso2MNF7H67HORFJxQ7qTWhcc98q9bhIThe2jAipAosdPW5pQdB9Km95orNFWNSWAxyY9p5wJVcMuFdlSA+CzTg6+EubFcWVimjXalezByotwm62rVwG8pm8rbHi9viyR2IZKg9U1rjWZtdgKu1HnhjVZYBjWJaFKniyGyqlT8f8wa7fRs4Yg3XDA8JjfpSHICGV2J0FY9o+puWa7obTPJ0kZ3JdmweruccFXVhkeldJwLaKjmOhWS8+67v3WcpgcGUphfmrkZBFywMusQa100YdsG0SIAcrilbOrjBDu9YoRhgXjtHBvQLqJ6f0mi1dWGJQCEfkqaecYuW52jJQdh2dgQKaqVUN0m4VwNgyElD5xTpZcn5UlvY38bFzahHI1anvsXexXJB\/BC+OI+NF3gz0rsmf3a0Q9kMO4n95Jz+gQVeUEueoio2cPVa7jdFrgJj0si3Xj5dYUtu8bshkIIvIiE9tl4fwXS2YseRPnFzP\/8Y2v6PJYCeEyfBLCsvVepG1WjjM688qZIw4It3y\/GKs7s3DdH5IURnMfs5JO9e26ahW\/mNdS6fl8nmcp+TQjQZiy8rqyrtJh+pWtXz73Bcvax3hPo5viw1\/Ul84I6uU3DyrE8Q\/6yVHSoty6moKyb5I9D6BRNFBvVgnKnpUS9DKjVDByItIXQm8XuBAceUGtQrLbv4ZBsq\/vP9mwQDtyWAT2ysv1Dc6yAa3taEZaGpf5\/lF0fvq8nvB9Eqe0GnOFfd\/aIzQM1XVQi5B7U1fXpiaP\/kx4FiyMXeU84MjH\/hky9cSrTIDCTKYKoCVJKXRQtj6O3UqgW3VYvGkLq46nNep454w6mD6WviNhomP9k7\/f2xaMXmsZHZlkdKzMsuokm1xSIEeH3VFO78Is7OsqY+MmxoT6WrP0oNxREO4tpzTMqvGWbmXgzEYtskjdpnhPrRvbXPwsKGwnY03lWD1x2ES6W4GEcq7WuEonRgfUD9sdxdVT+MnEn55xxGh\/vh82GrdYzLsaSYAaG0jDKIMvi1B614wHwJ09gQcAOuHr4mH5OWzkdtLu0CE8Zj94w3fh3o3LKqt8PFXiLi4eIwwbtxGepFEJ+JWdWmJbqXepnYmIhvSeoMN3lPCtqWaTnaB2ubtdy\/jsVXxg1Y8Tyg57\/N0LelHudq1jtln+hMY0Oa3HbM86Tsqi+0G0SuiO2Rw4l9gu1bNfRdOv+SO2T1fBjoROyDGxnF9pElcMXWPDIeCoPjRGd+sSJo2pZXe7ejhy2xPbeK+3IvVwIRsbzN3pvGSMQSKI\/GfPtQAmYN32z5IwcKYDZmQ3T99pgg62YwwEvlmTt94b29u1r3Jsbko6qp4+VZLEz0AaTY1tH+tIthG5V2\/gXK1Qcxf3NOHAXzkk+WFPk7NbA3qEI4vokX0UKzVqnsFJLJWHeaZYJAz5MhgVq7VQbvBljxRYic7y+IyP8LyLsP\/2wsYD69AyJollHkDDxG8y+kmoeGynqAHx4wA\/GP1jktbBRpn7CvgSt8Uv1BzsDqgFC16BJYjSwKdzi9zHgW9ERAFW6OkwJnG0H2Mbdj5tSfYkmR5ALE1WDSmzmNnQbhnj063vNw2BiyySNCfIok3K4BPhKcNgejwccxCosw7UCjCUBCSFIMiADM6RNEQLwnrwuwwn1dfcR5ZHFD7idQPlTtP7noT4fU1HvRP0QnKsNNUFWCFJrcy3sW8ASLGVbY9VzWgX+D5qXajN5THD4z\/VrOW4Nld5UxMIBy+tWG9xcgu4u98ci20Ht4UfIkA89a3ciV2JLcCE7QWRIsnGXh1GELNeE6YWqJNnuemQMeBv6FGDc6c9nmjR7ZDEeA7Ep3eDn3\/56Yfvvxnc1Lc4\/CKIYp9aqyBZhVQzKDnSqb5vhS2vspFiyUNjz7aVcDT0bn5u93wm1YUMTpxr5djRNvkKY4mhjw3I1QW6mYK2diatoaM5iD7WZ35JyemPsCNT+O6Hr77+6YtfvlZplICcHZv9z6+\/+LapSWnY8pnjk3RLfZQq4Guit8+keI9YWDGHVME5ARk1K6hqj4WsMJNH5HViio95HJUxno1ZYqUzwmwsfbYMPykggDwxSw4vLE94D0LD7n9sypbhUaZY9iok+5SyLDL2mz6Q7xL4p9kytETZh6P46fCzYhbvK7hSXn76FvoUHLa7keIZJurk7NiSSEGkj3QJUKKVAIzOjfILTnZ8sggOoJ9tqz5Jr4dPsli2+NNPLZYG63muzpOamZJ3w1R8MIwd5qDAXsgVe4NDPjzfcVhX5mwYSkdQZ82xLqBAW27pgqH17LsVONDID1jBjz6nw3VdkywlLvOPGHCqysRBxdQGMpJgaVlDAiYEGbVEOPaxvaQ3kiqMZdNYAH0Z\/Pg7CqWXh8B4JL3S+IsKpJcnKI+nt54knh7osjJWWjQZxcsjgfbiVIl9ogXn5O2NZe9Brls+0QqVofP62LfPBEiosB77hLKjepPPZHFIQQbRkK7AmB2G2K+p4kSfBC3CGci6AtPngWSaqWT4SyMNfoGv5n5Uj0C1QhXss5ZXaRgG+zRItcUqzDgUO+yg0DN1DsimljzdE1NCY1lriu0R+xCkjfrB8+QSVzK0VGsQ1L+5nDd65is\/pOp6ll895y3ubtQNliKPtOHk3XTUMPVNg+XLElfBslpdxZOrq3ho2\/ueRDRkIfvOkqRBWjFCTKuWy1J4vFxtrujXR7593HTWW4qWzkSNIs1iwT09yqrhSElUe67gRD+E88U8JDk++bEHLJZoj1zU7gwZ3kmXqH+uZUmDLiruuA3TUD+feycIoOFNeYexgH\/I9uuYBnlEhRoJzIO5z9S+64slIDjKpYApvADR7MeEhgAU9gA4ZLLJhNXRwbb3lGY6TpDu9tnjudqJGPGSpgftqd87A+byFguCwik1ZbuM3Qa4DFdfLwoTzLKl4RoL4akWdgnDU5VdTAUM7pMgypw4Ch87i689SaTskiLfs5YAiovmypUszLzasd7UkkW6y9BVCLm7tSIQWrRFUZRxqdELuxVs5NSrNv9TbS9isG1mjzx6Fk9JU8OhTCiftkko79XTfWPxp1b05N7PJh3GuSz4ZLWoynlyFjB+mphdbhp9fD1nSpsenCr2qbCvsigfMLARsJy9PqVOl5uhaaJtxwH7GaqlvE6HcCjhQwXWy9kQDlT0rrQsfvvzjvoBsV7vE7qmSeok1D+sqC9qcoMMgr8RMtb67MgO6YEUnyycx0u6JfcBDCyLispp800aX7xZVTjmr9bsv0XlCFe7nqfw1W6wo8v81Xq8Hq8nC0XJqzyrSqZ5slmS1y4rSO5ejcbDxQn5pT58LZ6V9bH5K5f9t9AYNeavRgT+LSoHrvmrMYF\/C8kEAM+O10S0Uy4ctX1pZhedVLANryb7rI4Mia+1\/Z7V\/YYZMmS\/pfebYWcVA8DsbCSMjI0u82cjFWMbE1nGZr2Nt\/PZHezDNnLLspFWhc6aokbZxIZDsBrHkp5QycrpgTFZAf1ysUBDnd4E9B67Ywmw0XifoYlVMINsA7BDKopKtqh8nZYM1pRPNW81wwHFqEfkTKSGkHUGBhWWGYIDZVGFas\/2OkD62LgyqjYuW9hG5wu2kBmLONlvCcOlBMdB\/Al+w44SmjMbX0jO7gHogtwB18EGF\/fxyUbmrtvoRGAbB21g4+pOIGvn2EgMZ7trlEg9VQwdvgZQcIX0yMgypGw60cSBc+Ee217Sn6lPxz6ZURCxKa3rGSzrLqBvNtJ2xLvNIRfmFqhWiq3IVaDCXaRlSi6FauMk+nu1W3JLFZ6RWR8cMlv2R3vubqfKFBiGjhEmXPUWASbD7qqWNqzK7RrwJLuiXBmOOAMYLNRMg5ATfdSFPH1BSks2mk6Z1OTjNqHrf7wbbLNsP7iZz9nXKXFBBta\/DiySZclreG5oDd4PUAf0N0x0NsWKmElCvnS1RZYt35T3gCqtsszKOOkmR15DcJzk3pupIXHXsk\/JVbzKbUIUdF5k+IDzicsb+3ykjT6tRJsC\/J47oTslmETEkvCxO49MpARD8GCHPKJPMsGUL3DTXckdt\/E4a5Jmw\/IqJSnleg1J\/KEtW\/2Qr3Z4Bzs9GuIkDIVJIAIbCob8IAXJ31q2FNZIhgCev12kh+TGOpeV4+AfOYrBYxjGn9on4WCs1ydcGC0Mw31Mtee45P5YJs2KcR6eZJ27aM9wiPPjnmUSrEf3FMMlf6MvB7IBW9\/hni6183QbPtApZorsKs34oH3sDRxuoMxdYdbvm3hwmoh+CNpu6ca77pNoQ5PqjGD\/7+yCh9dBZKXJZllujKskYBkbQ2s8+ZMtiZjaHlA8aYjF9qs7p+yk8TpDk38PieNc0Wbed6EXcABgQJHF6Du8UeJvKGrDh9qIbVUb0GGmV2NVi2HF0EotZqZTYpAZjbrYy1KzAaNOXbfhCmxFt9HnR1WBOfWpI3rtpq4k\/YYe7Qo7zE5cZVzR1U\/nEEkhcGY2FFIk0UMhwZsccxA9rTRtFOeTwUCE7ErzXoKfFRPh7du3aoyVrCX1WSL6apU9eqgUvaxK907lLmt8FjUpe7FZVrasbqJdalrWmRQbYl8ui2aOZvb6Kp+8emgvHkUB0gp\/+NKjNd7yyqC9uCvKi1b461JYtMZhUVq0F4tlgdLmfbgfn\/88kCg77HryWbRS5VPcGP7WrXWubOcHLDyL7Jy2T2iaSsc0vYqrq9HULwaTswEVqRuUxqJiaWttYHjewIGrhxvcB36ROzFX4vwMZrMpQXClmjICJeXKa6emjKbd1BQUj5Lz8pxiIUJ2NTnneVkJ2ak2uhpNzE0qxiZfISG9hwBlXslM8gB4M6Q9pN6m8OgqzY76NwsrQm1zUk\/wFhUvUKRYlRk2u8YuB4H4fHQ11s4uY7tpFElRCKcOBUqWXV4TyfgxoJImo0VDP6MIL8oRvGYjeD3R2Ug7jFND9fC2Z12hfNWOun05KfWo\/sfunrzIVeFb8lJozmZ5uYGDt+I045wE0ZYmQWbq6zdQ6atxN3\/jswQ76s7NX\/Icxa5HnypFoWu3nTdMCTc9fzkP53qM1\/99qRK1Bjzs5AEZoAuLY7B2c8Tv\/poQKoS6UEo+XqkNkizs66sx1GqD6iAVxcEd64Tj9SRXh5jfcUlCEq2qMOVRnOxIuNg+7rc0Suc7Eh1IyOnHe2GVC36FJlluP+8IJdkhoU5KsyyINul8cEeTaGDFkT1IU9cbWHEedlqFeZKAnUQnH6NsSyFnlA1+DhnB7+3iGKoKb+YkygISBiSl\/sLZxb86cfpQfWaTkMd0RcJ+AWmtjEWifB7\/KB58FEhcaqX0zepaX\/0bte\/BjmZJsDrBetUl7c0qCWVttVP99+yJ2rXnmDcALktDRC9qwE6aXojzgDrYXvP54IL9a9ez+rJKU3fElxVUIOG\/ZdFhB79dil+I0irTG4rMtpFqQjyb1WruaJjz9P6zpkMyLkUxb6\/4xSFh1tx4lxJBPN6Liz1wI+V2BZWKdTEyaigTplISJi4kTsrCRaNajr9UpclwUWOTWf7QCeeuGiSurTf39Ln0a7LDZ77zw5k1EefbE2dbI7DzZFevpjQYLE4CuUrKmFXXxqxRU0Z451HkS2RNdu8G3\/z7D19+8e+D0pciU3q1ervy1l7nxn\/6+pu\/\/fB9c\/N0tpr6s87Nf\/jhP77\/5ae\/N7W+nPjXlHZu\/eevP\/zyw0+Nja\/pW590b\/wXwLn95m8fGodm7V8v\/c7t\/9cvX3\/4a2PbK3+9XGMCG3f7zoAQ7QMob48tsAhPICC2J8SzapbxQ67LWwUs2cNChY2VYlZndehzGXqOlfEYn0npRxYzFJxKVFjxkClAHrXvrkVEchqMaLIbFn+FEN\/UFMvINcND5NNEwdbBpJQDaSWEzW7\/Jus+BHk\/AVhQH\/DjW+d+e+QmCYgmJcs0Dg8ZXUgY00WaiAQPV8BwrcIAMOnpKnvtMgnrDhd9MGJunR1Js2N3RFlj6gTnpD6PC6ZkLC0BXO6iRh7al9UVpg2cAZLUKTOlfvA509xauFeepkCr6GJ2ssS5VytzeF1DtZxqgH6RHoOCmW4h1g06kBwn743xXz8rcGxqVIu9C9vmGoXlLgBMMh1+SYFayvpWzj00R5bfPtXrlufk415JM4J95e4eCu1K62f0UtfP2vJ9\/PCVtSt1lcPH1UXHdrMehY5HLswRjHIg9gaJK4blo3A1nqJ0BVbjFTFUJMlYtlANEYejr5Ul0Ka4nX07Kgafo4jxsiNlT69r2KXXM8SmJxkZLZyVkXHnnd6Qa7x5Ot4wBK9PFn1\/U6M37kcvOjbv1nmtJK\/Y0JyE06iIU3CGMq249ZkbvbpRyb+3DlmmiKf3J6GVasVBven59a\/Wz8OpmWSZOqLamTzBzYCf3fJYgHPK0az95j6mO0MfmaGmN5VEzzl9PjBNGXi5UTbgPvUqOeyWrcsiqWjEDVCamv3BzNdRMBo8pXpq60qWmvIrKFjuWxa71hYo2jCqnCCugeXUa7hyMuiDqXI9TdHtp7UVvaJuakcRw2IWZvJWoBw2lPM2XkD81kniT+nR9JSBsL5Whwyw9VijtTBoe\/mMUbe7C3ffCTioZAJmi5H1OSvxY3k1WT++qKwHRpqKx051Gxyy7V1D29ftFX10nyrgaV1Om5Ozp02vViqvEBKXmzaAdNAxFf8WEK2sODS+6KBZUhESZW2I5n2aFw0zup128C4J\/nl9rYpidmE1O4tXJ1ybF9O4irk\/OnluHuFwcitz89Sa86ZNmLkznOqeZAzUTbITp1C7+HFR6DrCiZnScC0AeNnxOZ9fKxKuXo9c935rOezoNZQsySg8DvlrCqPrDGciUJBXijIn1ZPNc1XDuO1Riq+2pHFUi2p79apj9dphL+JoxZF9bOQLkrVn1tg\/XW20y4mbAqIor5X21CbJM8dDbFeUsm\/ycb9rTWmw8CK+c3jfcJq5xLTtcLZIs\/5xFqrxShN5AYGw2s+au0h7ViEXVvde+p\/navS\/PmYmxtJ7P7hHzBZIUEnfh4EC1vhyq5kU3o7Swj9usPCbU97uFeDImrSB6NnFxYx77AP1m2ezk\/PMlCWFJH7F2zmu2Lqnpm3dd\/fHLn65u3tYJEfFmHPJAxV42y7hkUJosRvjJzKyeS+XUT81LydT2RAyrhtC3At\/ALKRChapIz\/pae8lG8kGz\/rPuz23PFQrTnCs2mS8y\/pfWKD6KV+Y3hZu8lBMNk2G15pzqpws+wcZVEQ3U\/JEqraWVlnhnF1U4eyy\/yesyp22Cs34dMga3i2dEzsXJHi9ToblX946GWJOobsHTFlo\/vxWqUfEI4WRJHPFvHOxdGjGCeOjsfPC7oFZDY5mVnS0an18MkNwH4QhSdJjzX5gRsKI5i1FOb20qBBEnagqL7ppKHlz9w3ix6yiyutfVaIvpjUf46i6f\/ok3dKnyWhYVLzB2N7JglyjYl5aZHEeyl\/zGJ5LaP41WtHJjcJ0wZRbfMGU1+s4AZKMzXRuCfjAI0olsJEjZCPDEeqKwweWdfULfcg6lH7h8e+mKpNIIbcGSkfkAcUVcOFFLcI4M5NKpYtr89z6YHhdAlf7of+yuDT1GF9jazTBBZIZLN3A4sR6vZ\/FK7tzmAr27NfHQ6hWBvFQlUGkqMV+g6VFoF\/gocNv+2HR3xoG6BftJR0MgPZl7YzYrVpS\/voUG1DdC3YfTR+7RhAJM5cFPn\/KWMuy8NslS67A\/qWbFqzaVd\/ybTCxmUzvvMOJGlqV7RW5ycFp9Sgd5jF7UkLXx7benr5zK6Frk1kcXNNNl2p98Q4NMBNvK\/PkG082TyrGJq8jcU12RWOcxzNlV5Ss+ifOppc0SvsJWWenglPcFsEpbW19rc6mHU+SaD1Ze1BXDPNPeaaNaPa78f6BOemUvYn9E6VKDScAYFTcLUmof9oQw9wg0ydHlhAhD92tMCwxNCL3cvC2HJKEi95cB5uaDwITULzbVBEvGpLAJxAPVsQQsLCnp57l3UwLrI9yNjuLi9KoxL\/9Pw==\"><style>#nxe-nr-gcri-editions-gs-13-full.nxe{display:block;box-sizing:border-box;max-width:1180px;margin:0 auto;padding:0 16px;font-family:ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif;line-height:1.55;overflow-wrap:break-word}#nxe-nr-gcri-editions-gs-13-full.nxe :where(*,*::before,*::after){box-sizing:inherit}#nxe-nr-gcri-editions-gs-13-full.nxe :where(section,header,footer,nav,aside){display:block;margin:0 0 32px}#nxe-nr-gcri-editions-gs-13-full.nxe :where(h1,h2,h3,h4){line-height:1.2;margin:24px 0 12px;font-weight:600}#nxe-nr-gcri-editions-gs-13-full.nxe :where(p,ul,ol,dl,table,figure,details){margin:0 0 16px}#nxe-nr-gcri-editions-gs-13-full.nxe :where(ul,ol){padding-left:20px}#nxe-nr-gcri-editions-gs-13-full.nxe a{color:inherit;text-decoration:underline;text-underline-offset:2px}#nxe-nr-gcri-editions-gs-13-full.nxe table{border-collapse:collapse;width:100%;display:block;overflow-x:auto}#nxe-nr-gcri-editions-gs-13-full.nxe :where(th,td){padding:6px 8px;text-align:left;vertical-align:top;border-bottom:1px solid;border-color:inherit}#nxe-nr-gcri-editions-gs-13-full.nxe svg{display:none}#nxe-nr-gcri-editions-gs-13-full.nxe svg.nx-i{display:inline-block;width:18px;height:18px;vertical-align:-3px}#nxe-nr-gcri-editions-gs-13-full.nxe :where([role=\"tablist\"],[role=\"toolbar\"],[hidden],button,.nx-theme-toggle,.nx-live-slot){display:none}#nxe-nr-gcri-editions-gs-13-full.nxe img{max-width:100%;height:auto}<\/style><svg class=\"nx-defs\" aria-hidden=\"true\" focusable=\"false\" width=\"0\" height=\"0\"><defs><linearGradient id=\"nx-gi\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\"><stop offset=\"0\" class=\"nx-gi-a\"\/><stop offset=\"0.55\" class=\"nx-gi-b\"\/><stop offset=\"1\" class=\"nx-gi-c\"\/><\/linearGradient><linearGradient id=\"nx-giu\" gradientUnits=\"userSpaceOnUse\" x1=\"0\" y1=\"0\" x2=\"800\" y2=\"0\"><stop offset=\"0\" class=\"nx-gi-a\"\/><stop offset=\"0.55\" class=\"nx-gi-b\"\/><stop offset=\"1\" class=\"nx-gi-c\"\/><\/linearGradient><linearGradient id=\"nx-gp\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\"><stop offset=\"0\" class=\"nx-gp-a\"\/><stop offset=\"1\" class=\"nx-gp-b\"\/><\/linearGradient><\/defs><\/svg><div class=\"nrp\"><div class=\"nrp-wrap\"><p class=\"nrj-draft\" data-nrj-shared=\"draft\" role=\"note\"><strong>Draft, not yet released.<\/strong> In stewardship review. Not indexed until the first approved release.<\/p><article class=\"nrp-flow\"><header class=\"nrp-hero\"><div class=\"nrp-hero-grid\"><div><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\">Reports<\/li><li class=\"nf-ui-eyebrow\">Baseline Edition 2026<\/li><li class=\"nf-ui-eyebrow\">Complete edition<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h1 class=\"pp-hero-title nrp-hero-title-l\">Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.<\/h1><p class=\"nrp-lede\"><\/p><div class=\"nrp-actions\"><button class=\"nf-ui-btn\" data-variant=\"primary\" type=\"button\" data-nrp-act=\"print\" hidden><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M6 18H4a2 2 0 0 1-2-2v-5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v5a2 2 0 0 1-2 2h-2\"\/><path d=\"M6 9V3a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v6\"\/><rect x=\"6\" y=\"14\" width=\"12\" height=\"8\" rx=\"1\"\/><\/svg>Print or save as PDF<\/button><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M19 12H5\"\/><path d=\"m12 19-7-7 7-7\"\/><\/svg>Edition home<\/a><\/div><p class=\"nrp-note nrp-noprint\">Choose A4 or Letter in the print dialog; running heads and page numbers are added in print. This is a review copy: the signed PDF with its DOI is issued at release.<\/p><\/div><div><div class=\"nrp-cover\"><div class=\"nrp-cover-top\"><span class=\"nf-ui-eyebrow\">Reports<\/span><span class=\"nf-ui-eyebrow\">GS-13<\/span><\/div><span class=\"nrp-cover-rule\" aria-hidden=\"true\"><\/span><p class=\"nrp-cover-k\">Global Sector Risk and Resilience<\/p><p class=\"nrp-cover-t\">Global Cyber and Digital Systems 2026<\/p><p class=\"nrp-cover-s\"><\/p><div class=\"nrp-cover-foot\"><span>Baseline Edition 2026<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><span><abbr title=\"The Global Centre for Risk and Innovation\">GCRI<\/abbr> for the Nexus Consortium<\/span><\/div><\/div><\/div><\/div><\/header><section class=\"nrp-block nrp-imprint\" aria-label=\"Imprint\"><p class=\"nf-ui-eyebrow\">Imprint<\/p><dl class=\"nrp-dl\"><dt>Editor<\/dt><dd>Saeed Valadbaygi, Chief Steward and Managing Editor, the Global Centre for Risk and Innovation (GCRI)<\/dd><dt>Publisher of record<\/dt><dd>The Global Centre for Risk and Innovation (GCRI) for the Nexus Consortium, Toronto<\/dd><dt>Report number<\/dt><dd class=\"nrp-mono\">NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/dd><dt>Evidence close<\/dt><dd>30 September 2026, cut DC-SECTOR-CYBER-GLOBAL-2026-B0<\/dd><dt>Status<\/dt><dd>Draft under stewardship review; not yet released<\/dd><dt>DOI and UNI<\/dt><dd>Issued at deposit<\/dd><dt>Licence<\/dt><dd>CC BY 4.0 for Nexus-authored text, tables and figures; third-party material keeps its own licence<\/dd><dt>Cite as<\/dt><dd>Valadbaygi, S. (Ed.). (2026). Global Cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems. (Baseline Edition 2026, Report No. NR-SECTOR-CYBER-GLOBAL-2026-BASELINE) [Draft under review]. The Global Centre for Risk and Innovation (GCRI). https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/<\/dd><\/dl><\/section><section class=\"nrp-block\" aria-label=\"Contents\"><p class=\"nf-ui-eyebrow\">Contents<\/p><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">\u00b7<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-summary\">Executive summary<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">1<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-coupled-system\">Chapter 1. The digital layer is where the systems meet<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">2<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-findings\">Chapter 2. Key findings<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">3<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-systems-and-sectors\">Chapter 3. Systems and sectors at baseline<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">4<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-risk-and-capability\">Chapter 4. Risks and capability<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">5<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-scenario\">Chapter 5. Provider failure under a ransomware wave<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">6<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-lenses-and-readings\">Chapter 6. Readings from the other desks<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">7<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-agenda\">Chapter 7. The 2027 agenda<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">8<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-systems-in-depth\">Chapter 8. Systems in depth<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">A<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-methodology\">Annex A. Methodology<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">B<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-data\">Annex B. Data appendix<\/a><\/p><\/li><li><span class=\"nrp-rows-i\">C<\/span><p class=\"nrp-rows-t\"><a href=\"#nx-nrp-gs-13-part-references\">Annex C. References and record<\/a><\/p><\/li><\/ol><\/section><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-summary\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-cs-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Executive summary<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Executive summary<\/h2><p class=\"nrp-lede\">The edition on a few pages: the abstract, the key messages, the headline finding and what each steward reads in it.<\/p><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>1 figure<\/span><span>0 tables<\/span><span>13 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s1\" aria-labelledby=\"nx-nrp-gs-13-cs-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s1-h\"><span class=\"nrp-num\">S.1<\/span><span>Abstract<\/span><\/h2><div class=\"nrp-prose\"><p>The world enters 2027 with a digital layer that is larger, more concentrated and more contested than at any earlier baseline. An estimated 6 billion people (74%) use the Internet in 2025, yet 2.2 billion remain offline, and use is 94% in high-income countries against 23% in low-income countries<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n48\" id=\"nx-nrp-gs-13-cs-r48\" aria-label=\"Note 48\">48<\/a><\/sup>. Crime follows the connection. Victims in the United States reported 1,008,597 complaints and USD 20.877 billion in losses to the FBI in 2025, up 26% in losses<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n2\" id=\"nx-nrp-gs-13-cs-r2\" aria-label=\"Note 2\">2<\/a><\/sup>. On-chain ransomware payments fell about 8% to USD 820 million in 2025 while claimed attacks rose 50%<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n29\" id=\"nx-nrp-gs-13-cs-r29\" aria-label=\"Note 29\">29<\/a><\/sup>. In Europe, <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> opened about 60% of the intrusions that ENISA analysed and vulnerability exploitation 21.3%<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n3\" id=\"nx-nrp-gs-13-cs-r3\" aria-label=\"Note 3\">3<\/a><\/sup>. The catalogue of known exploited vulnerabilities held 1,767 entries on 3 November 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n7\" id=\"nx-nrp-gs-13-cs-r7\" aria-label=\"Note 7\">7<\/a><\/sup>. Governance is moving: 139 of 194 countries had a national incident response team in 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n4\" id=\"nx-nrp-gs-13-cs-r4\" aria-label=\"Note 4\">4<\/a><\/sup>, the UN Convention against Cybercrime opened for signature in October 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n9\" id=\"nx-nrp-gs-13-cs-r9\" aria-label=\"Note 9\">9<\/a><\/sup>, and EU reporting duties for products begin on 11 September 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n20\" id=\"nx-nrp-gs-13-cs-r20\" aria-label=\"Note 20\">20<\/a><\/sup>. Resilience is the weak point. A single faulty content update crashed endpoints through a mismatch of 21 expected and 20 supplied inputs<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n14\" id=\"nx-nrp-gs-13-cs-r14\" aria-label=\"Note 14\">14<\/a><\/sup>, submarine cables suffer about 200 faults a year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n12\" id=\"nx-nrp-gs-13-cs-r12\" aria-label=\"Note 12\">12<\/a><\/sup>, and ransomware disrupted care in 44.4% of US provider attacks studied for 2016 to 2021<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n23\" id=\"nx-nrp-gs-13-cs-r23\" aria-label=\"Note 23\">23<\/a><\/sup>. This baseline sets out what the evidence supports and where it is thin. It ranks no country and recommends no policy.<\/p><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s2\" aria-labelledby=\"nx-nrp-gs-13-cs-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s2-h\"><span class=\"nrp-num\">S.2<\/span><span>Key messages<\/span><\/h2><p class=\"nrp-stand\">Six readings that frame the cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> baseline, and the eight questions this edition answers, each with its status and source.<\/p><ol class=\"nrp-km\"><li><p class=\"nrp-km-t\">About 6 billion (74%) in 2025; 2.2 billion are offline.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>How many people are online?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">No global figure exists on one basis. US victims reported USD 20.877 billion in 2025.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>What does cybercrime cost?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">Claimed attacks rose 50% in 2025 but on-chain payments fell about 8%.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n29\" aria-label=\"Note 29\">29<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Is ransomware growing?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\"><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Phishing<\/a> about 60% and exploitation of vulnerabilities 21.3% in the EU data.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>How do intrusions begin?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">1,767 entries in the catalogue; 361 flagged for ransomware use.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>How exposed are exploited flaws?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">139 of 194 countries had a national incident response team in 2024.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n4\" aria-label=\"Note 4\">4<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Are states building capacity?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">A UN treaty opened for signature in 2025; EU duties apply in stages from 2025 to 2027.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n9\" aria-label=\"Note 9\">9<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n20\" aria-label=\"Note 20\">20<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n21\" id=\"nx-nrp-gs-13-cs-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/p><p class=\"nrp-km-m\"><span>Is law catching up?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/p><\/li><li><p class=\"nrp-km-t\">A failure at a concentrated provider that coincides with ransomware on health and public services. SCN-GS13-CPF-01<\/p><p class=\"nrp-km-m\"><span>What will 2027 test first?<\/span><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s3\" aria-labelledby=\"nx-nrp-gs-13-cs-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s3-h\"><span class=\"nrp-num\">S.3<\/span><span>Headline finding<\/span><\/h2><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><span class=\"nrp-find-id\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001<\/span><\/p><p class=\"nrp-km-t\">In 2025 about 6 billion people use the Internet and 2.2 billion remain offline; use is 94% in high-income countries and 23% in low-income countries.<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-gs-13-cs-fig1\" aria-labelledby=\"nx-nrp-gs-13-cs-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure S.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-gs-13-cs-fig1-t\">Internet use by group, 2025 (% of population)<\/span><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">High-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">94<\/td><\/tr><tr><th scope=\"row\">World<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"78.7\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">74<\/td><\/tr><tr><th scope=\"row\">Low-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"24.5\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">23<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: ITU, Measuring digital development: Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n48\" aria-label=\"Note 48\">48<\/a><\/sup>.<\/p><\/figure><p class=\"nrp-p\">Connectivity is the precondition for digital services and for the exposure that comes with them. Africa stands at 36% Internet use and least developed countries at 34%. Urban dwellers use the Internet at 85% against 58% for rural dwellers, and 77% of men against 71% of women<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n48\" aria-label=\"Note 48\">48<\/a><\/sup>.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s4\" aria-labelledby=\"nx-nrp-gs-13-cs-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s4-h\"><span class=\"nrp-num\">S.4<\/span><span>At a glance<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">74<\/span><span class=\"nrp-cell-u\">%<\/span><p>people using the Internet, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">20.9<\/span><span class=\"nrp-cell-u\">USD billion<\/span><p>losses reported to the FBI, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">820<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>on-chain ransomware payments, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n29\" aria-label=\"Note 29\">29<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">4,875<\/span><span class=\"nrp-cell-u\">incidents<\/span><p>analysed by ENISA, July 2024 to June 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">1,767<\/span><span class=\"nrp-cell-u\">entries<\/span><p>known exploited vulnerabilities, 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">313<\/span><span class=\"nrp-cell-u\">shutdowns<\/span><p>recorded in 52 countries, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cs-n27\" id=\"nx-nrp-gs-13-cs-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s5\" aria-labelledby=\"nx-nrp-gs-13-cs-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s5-h\"><span class=\"nrp-num\">S.5<\/span><span>What each steward reads in it<\/span><\/h2><div class=\"nrp-cards\" data-n=\"3\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GCRI \u00b7 KEY T<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Technical Truth<\/h3><p>The evidence supports reading the digital layer as the coupling layer of the WEFH+B system.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\"><abbr title=\"The Global Risks Forum\">GRF<\/abbr> \u00b7 KEY M<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Public Meaning<\/h3><p>For most people cyber risk arrives as a scam, a locked hospital system or a service that stops.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\"><abbr title=\"The Global Risks Alliance\">GRA<\/abbr> \u00b7 KEY F<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Capital Meaning<\/h3><p>Readiness implications only. Reported losses are large, ransomware payments are volatile and law now sets reporting duties for financial entities and essential services.<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">NEXUS<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Synthesis<\/h3><p>The digital layer is well measured at the level of connection and crime reports and thinly measured at the level of utility incidents, patch speed and outcomes.<\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-s6\" aria-labelledby=\"nx-nrp-gs-13-cs-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-s6-h\"><span class=\"nrp-num\">S.6<\/span><span>What this edition is, and is not<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What this edition is<\/h3><p>A baseline: the 2026 state of the world\u2019s cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> and the couplings through which it carries risk into other systems. It synthesises published evidence and ranks no country, company or asset.<\/p><\/div><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What it is not<\/h3><p>Not a ranking of countries or companies, a forecast of attacks, an attribution of any incident, a vulnerability disclosure or an assessment of any operator, vendor, regulator or government. Cybersecurity law, incident response and the operation of networks rest with national authorities, operators and companies.<\/p><\/div><div class=\"nrp-cell\"><h3 class=\"nf-ui-title\" data-level=\"card\">What comes next<\/h3><p>National, regional and sector evidence feeds the 2027 cyber and digital systems edition through the federation. Each edition reports what changed against this baseline: observations, source revisions, method changes, scenario updates and corrections.<\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cs-notes\" aria-labelledby=\"nx-nrp-gs-13-cs-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cs-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-cs-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cs-n27\"><span class=\"nrp-notes-n\">27<\/span><span>Access Now and the #KeepItOn coalition (eds.), Rising Repression Meets Global Resistance: Internet Shutdowns in 2025 (annual report, March 2026). Access Now, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cs-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-coupled-system\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c1-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 1<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">The digital layer is where the systems meet<\/h2><p class=\"nrp-lede\">Part I describes systems and their couplings. It ranks no country or operator and assesses no authority.<\/p><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>2 figures<\/span><span>1 table<\/span><span>15 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c1-s1\" aria-labelledby=\"nx-nrp-gs-13-c1-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c1-s1-h\"><span class=\"nrp-num\">1.1<\/span><span>The questions this part answers<\/span><\/h2><h3 class=\"nrp-h3\">Key questions<\/h3><ul class=\"nrp-list\"><li>Where is cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> risk concentrated?<\/li><li>Which couplings carry cyber and digital systems shocks into other systems?<\/li><li>Which cyber and digital systems capabilities hold under compound stress?<\/li><li>What must 2027 evidence measure first?<\/li><\/ul><h3 class=\"nrp-h3\">In this part<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">Narrative<\/li><li class=\"nf-ui-chip\">Headline finding<\/li><li class=\"nf-ui-chip\">Lead figure<\/li><li class=\"nf-ui-chip\">Five coupling chapters<\/li><li class=\"nf-ui-chip\">Twelve-domain reading<\/li><li class=\"nf-ui-chip\">Sector screens<\/li><li class=\"nf-ui-chip\">Dependency matrix<\/li><li class=\"nf-ui-chip\">Risk objects<\/li><li class=\"nf-ui-chip\">Capability ladder<\/li><li class=\"nf-ui-chip\">Scenario<\/li><li class=\"nf-ui-chip\">Three lenses<\/li><li class=\"nf-ui-chip\">Portfolio<\/li><\/ul><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c1-s2\" aria-labelledby=\"nx-nrp-gs-13-c1-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c1-s2-h\"><span class=\"nrp-num\">1.2<\/span><span>The argument<\/span><\/h2><div class=\"nrp-prose\"><p>Digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> are usually reported as a sector: networks, software, crime. The 2026 evidence reads them as the layer on which almost every other system now runs. Clinics, power and treatment control rooms, payments, logistics and public services all depend on connectivity, software and data<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n19\" id=\"nx-nrp-gs-13-c1-r19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n23\" id=\"nx-nrp-gs-13-c1-r23\" aria-label=\"Note 23\">23<\/a><\/sup>.<\/p><p>Connection is still unequal. About 6 billion people use the Internet, 2.2 billion do not, and use is 94% in high-income countries against 23% in low-income countries<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" id=\"nx-nrp-gs-13-c1-r48\" aria-label=\"Note 48\">48<\/a><\/sup>. Where people connect, crime follows. US victims reported USD 20.877 billion in losses to the FBI in 2025, and <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> opened about 60% of the intrusions that ENISA analysed in Europe<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n2\" id=\"nx-nrp-gs-13-c1-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n3\" id=\"nx-nrp-gs-13-c1-r3\" aria-label=\"Note 3\">3<\/a><\/sup>.<\/p><p>Concentration is the structural risk. A single content update with a mismatch between 21 expected and 20 supplied inputs crashed endpoints<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n14\" id=\"nx-nrp-gs-13-c1-r14\" aria-label=\"Note 14\">14<\/a><\/sup>, and the World Bank notes that cloud market concentration can pose systemic risks to vital sectors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n30\" id=\"nx-nrp-gs-13-c1-r30\" aria-label=\"Note 30\">30<\/a><\/sup>. Physical routes are also concentrated: about 200 submarine cable faults occur each year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n12\" id=\"nx-nrp-gs-13-c1-r12\" aria-label=\"Note 12\">12<\/a><\/sup>.<\/p><p>Governance is catching up unevenly. 139 of 194 countries had a national incident response team in 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n4\" id=\"nx-nrp-gs-13-c1-r4\" aria-label=\"Note 4\">4<\/a><\/sup>, a UN treaty opened for signature in October 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n9\" id=\"nx-nrp-gs-13-c1-r9\" aria-label=\"Note 9\">9<\/a><\/sup>, and EU duties for incident reporting, product security and financial entities apply in stages<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n20\" id=\"nx-nrp-gs-13-c1-r20\" aria-label=\"Note 20\">20<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n21\" id=\"nx-nrp-gs-13-c1-r21\" aria-label=\"Note 21\">21<\/a><\/sup>. Evidence on outcomes lags the rules.<\/p><\/div><figure class=\"nrp-fig\" id=\"nx-nrp-gs-13-c1-fig1\" aria-labelledby=\"nx-nrp-gs-13-c1-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 1.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-gs-13-c1-fig1-t\">How uneven is connectivity? Internet use by group, 2025 (% of population)<\/span><p class=\"nrp-fig-what\">The gap between high-income and low-income countries is 71 percentage points. People who come online late meet the same threats with less capacity: only 88 countries have submitted ICT skills data since 2020<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" aria-label=\"Note 48\">48<\/a><\/sup>.<\/p><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">High-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">94<\/td><\/tr><tr><th scope=\"row\">Asia-Pacific<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"81.9\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">77<\/td><\/tr><tr><th scope=\"row\">Arab States<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"74.5\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">70<\/td><\/tr><tr><th scope=\"row\">Africa<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"38.3\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">36<\/td><\/tr><tr><th scope=\"row\">Low-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"24.5\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">23<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: as cited in the note to this figure. Year 2025.<\/p><p class=\"nrp-fig-src\">Figure ID FIG-SECTOR-CYBER-GLOBAL-2026-BASELINE-01-003<\/p><\/figure><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">2.2<\/span><span class=\"nrp-cell-u\">billion<\/span><p>people offline, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">55<\/span><span class=\"nrp-cell-u\">%<\/span><p>of the world\u2019s population covered by 5G, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">4<\/span><span class=\"nrp-cell-u\">%<\/span><p>of people in low-income countries covered by 5G<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">88<\/span><span class=\"nrp-cell-u\">countries<\/span><p>submitting ICT skills data since 2020<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/div><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c1-s3\" aria-labelledby=\"nx-nrp-gs-13-c1-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c1-s3-h\"><span class=\"nrp-num\">1.3<\/span><span>Twenty couplings between five systems<\/span><\/h2><p class=\"nrp-stand\">The cyber and digital systems-centred matrix types the twenty couplings between the five core <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, read for their cyber and digital systems content. Strengths are Nexus estimates (ESTIMATED) from the cited evidence and analogue events; they set the graph that 2027 evidence will test.<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-gs-13-c1-fig2\" aria-labelledby=\"nx-nrp-gs-13-c1-fig2-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 1.2<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-gs-13-c1-fig2-t\">Couplings between the five systems<\/span><p class=\"nrp-fig-what\">Each line is one coupling from one system to another, drawn by the strength the edition assigns. Strengths are Nexus estimates from the cited evidence and analogue events.<\/p><\/figcaption><svg class=\"nrp-svg nrp-ring\" viewBox=\"0 0 340 340\" role=\"img\" aria-label=\"Coupling ring: 20 typed couplings between water, energy, food, health and biodiversity. The matrix in the next table carries every value.\" data-nx-z=\"rZZdb6M4FIb\/yhHX1AHzEaggUkeb2RnNzlSdrdRrF9zEqoOR7TST\/WNzP79sZRwKbb6akBuEwOI8fnns46wmeg4FJ0rlTiXrK1rOqAMl0eRqlTvfb\/+a\/ry5nzpQ5s53f+whzw0S5MEdDscodOMARYDTCEWuj1OEHVBaimd6tWKlnueOj3DkTDLNNKeTB6KpBC1gWlE5W1\/DYvN1BGpOJC2hEJWWgkNF9UrIZwV\/fkO9XNRAKvNScFbNgAtSZiP7yWxk+CfZ4Vk8TG++7Z6B5\/phhDww97GLxzFKtqbw+qAkBlOSde4EEG5P67MQ5TWspjffEDAp2YxoJirQlNMF1XJ9GvT+6P04RaFrrgmkGIV7uHdG\/4USruf96LWkRC9opV\/T\/\/MbCs4qVoBa1jVfXyJsH\/socX0vQGMIw726fDjrT0yU7IVKxfS6zXwhKqaFNI4oWikh1Wnk\/97\/vP3xt2XvOQ132E8Q3sB3k3oPj1GXtzXcgDbE16CabyOoxYpKeBKyl7uV22av1krThRqiylv0NELYxb6Hxgcl78vSwVujO1cKwUso5oRVRhIuZkxpVqjzqA\/E3XAGEYoO+L077tbvNu+5UDXThMPXe4Nc0hdW0GZfeSTF87K2P+Rcw99gWzOaxTlE8W4uRxxvN8mz4TsdLHy82VP2K34U3gjTs94yl3RhFD9zH9wDjMPEpJ1GKDjYgD5K3PYki2x6TLsmB63F9xl7buD5KP7ovt3SbW\/bT+aNIk9Ur0FLUlDyyDjTlwnXxw1eswIHqNzS7xKZGyUMxrnAXYJwlwavnXyAvDbkLX3VUr5QxjmpCnoxYoMZuuYaDdK3Y94W+FKcnosjPPCQ1HH2T0liqR8lJc8XizUMUbLpdgO87WB3mfufEJVQTA2C7ujgLsUotifpAfL2SbcULogu5s1Z41LMljRJjRYD9H1P\/VZiSZVYyoGr7g11nJouZ1fdAJvfY\/edrqmyR7pacM4qooW8pCltzzvQQE6lb5vLplszRYnanfmsD1yJkjqTrGCy4BSKX7nTSOFAYeo1DsvcwbEzmmSa\/tLQjVjnTojNjXl+RapiLmTuLFhZcupMHm7us5F5M8lGs6NFG\/1s0Y2DW1U3Q8yIIDAjdpad\/pieUtboY8tu\/sJ2WTvEjEg8M2Jn2c+3tyeUNb\/9cFU74kjRL\/+cErFR8HDCdsSRgD997c\/0fw==\"><\/svg><ul class=\"nrp-legend\"><li><span class=\"nrp-key\" data-w=\"STRONG\"><\/span>Strong<\/li><li><span class=\"nrp-key\" data-w=\"MODERATE\"><\/span>Moderate<\/li><li><span class=\"nrp-key\" data-w=\"WEAK\"><\/span>Weak<\/li><\/ul><p class=\"nrp-fig-src\">Source: this edition&#8217;s coupling matrix (Table 1.1); status Estimated.<\/p><\/figure><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c1-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 1.1<\/span><span class=\"nrp-tbl-t\">Coupling matrix: from the row system to the column system<\/span><\/caption><thead><tr><th scope=\"col\">From, to<\/th><th scope=\"col\">WAT<\/th><th scope=\"col\">ENE<\/th><th scope=\"col\">FOO<\/th><th scope=\"col\">HLT<\/th><th scope=\"col\">BIO<\/th><\/tr><\/thead><tbody><tr><td><b>WAT<\/b> Water<\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>MODERATE<br><span class=\"nrp-cell-u\">shared control networks \u00b7 pump and cooling load<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">irrigation telemetry<\/span><\/td><td>MODERATE<br><span class=\"nrp-cell-u\">treatment control \u00b7 clinic supply<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">monitoring sensors<\/span><\/td><\/tr><tr><td><b>ENE<\/b> Energy<\/td><td>STRONG<br><span class=\"nrp-cell-u\">power for treatment and control systems<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>MODERATE<br><span class=\"nrp-cell-u\">cold chain \u00b7 logistics systems<\/span><\/td><td>STRONG<br><span class=\"nrp-cell-u\">hospital IT \u00b7 devices \u00b7 backup power<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">monitoring networks<\/span><\/td><\/tr><tr><td><b>FOO<\/b> Food<\/td><td>WEAK<br><span class=\"nrp-cell-u\">demand telemetry<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">load control<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>MODERATE<br><span class=\"nrp-cell-u\">food safety traceability<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">land data<\/span><\/td><\/tr><tr><td><b>HLT<\/b> Health<\/td><td>WEAK<br><span class=\"nrp-cell-u\">surveillance data<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">load<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">outbreak data<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">zoonosis data<\/span><\/td><\/tr><tr><td><b>BIO<\/b> Biodiversity<\/td><td>WEAK<br><span class=\"nrp-cell-u\">catchment data<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">resource data<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">pest and pollinator data<\/span><\/td><td>WEAK<br><span class=\"nrp-cell-u\">disease data<\/span><\/td><td><span aria-label=\"same system\">\u00b7<\/span><\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"6\">Strength: strong, moderate or weak; a Nexus estimate (status Estimated) from cited evidence and analogue events. The scale is defined in Annex A.<\/td><\/tr><\/tfoot><\/table><\/div><h3 class=\"nrp-h3\">Transmission paths<\/h3><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-t\">INF \u2192 ENE \u2192 HLT<\/p><p class=\"nrp-rows-x\">A digital outage or ransomware event reduces power or hospital systems; clinics lose records and devices.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> 2016 to 2021 health ransomware study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-t\">INF \u2192 ALL<\/p><p class=\"nrp-rows-x\">A faulty update at a concentrated provider disables endpoints across sectors at once.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> 2024 content update failure<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-t\">INF \u2192 TRD<\/p><p class=\"nrp-rows-x\">A cable fault or shipping disruption degrades connectivity for regions served by few routes.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> about 200 faults a year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n13\" id=\"nx-nrp-gs-13-c1-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-t\">DAT \u2192 FIN<\/p><p class=\"nrp-rows-x\">Ransomware and fraud drain finance and interrupt payments.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> FBI losses and on-chain payments<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n29\" id=\"nx-nrp-gs-13-c1-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-t\">AIC \u2192 DAT<\/p><p class=\"nrp-rows-x\">AI-supported tools speed <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> and exploitation of known flaws.<\/p><p class=\"nrp-rows-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span> ENISA and exploit study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c1-n24\" id=\"nx-nrp-gs-13-c1-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c1-notes\" aria-labelledby=\"nx-nrp-gs-13-c1-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c1-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c1-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c1-n24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c1-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-findings\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c2-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 2<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Key findings<\/h2><p class=\"nrp-lede\">Twelve findings carry the cyber and digital systems baseline. They are grouped by coupling and never ranked. Each resolves to its source or, where Nexus analysis is involved, to its stated method.<\/p><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>1 figure<\/span><span>0 tables<\/span><span>17 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s1\" aria-labelledby=\"nx-nrp-gs-13-c2-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s1-h\"><span class=\"nrp-num\">2.1<\/span><span>Headline finding<\/span><\/h2><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001<\/a><\/p><p class=\"nrp-km-t\">In 2025 about 6 billion people use the Internet and 2.2 billion remain offline; use is 94% in high-income countries and 23% in low-income countries.<\/p><figure class=\"nrp-fig\" id=\"nx-nrp-gs-13-c2-fig1\" aria-labelledby=\"nx-nrp-gs-13-c2-fig1-t\"><figcaption class=\"nrp-figcap\"><span class=\"nf-ui-eyebrow\">Figure 2.1<\/span><span class=\"nf-ui-title\" data-level=\"card\" id=\"nx-nrp-gs-13-c2-fig1-t\">Internet use by group, 2025 (% of population)<\/span><\/figcaption><div class=\"nrp-tblw\"><table class=\"nrp-tbl nrp-bars\"><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\"><span class=\"nrp-sr\">Bar, scaled to the largest value<\/span><\/th><th scope=\"col\">Value<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">High-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"100.0\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">94<\/td><\/tr><tr><th scope=\"row\">World<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"78.7\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">74<\/td><\/tr><tr><th scope=\"row\">Low-income countries<\/th><td class=\"nrp-barc\"><svg class=\"nrp-svg nrp-barsvg\" viewBox=\"0 0 100 8\" preserveAspectRatio=\"none\" aria-hidden=\"true\" focusable=\"false\"><rect class=\"nrp-track\" x=\"0\" y=\"0\" width=\"100\" height=\"8\"\/><rect class=\"nrp-bar\" x=\"0\" y=\"0\" width=\"24.5\" height=\"8\"\/><\/svg><\/td><td class=\"nrp-mono\">23<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nrp-fig-src\">Source: ITU, Measuring digital development: Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n48\" id=\"nx-nrp-gs-13-c2-r48\" aria-label=\"Note 48\">48<\/a><\/sup>.<\/p><\/figure><h3 class=\"nrp-h3\">Implication<\/h3><p class=\"nrp-p\">Connectivity is the precondition for digital services and for the exposure that comes with them. Africa stands at 36% Internet use and least developed countries at 34%. Urban dwellers use the Internet at 85% against 58% for rural dwellers, and 77% of men against 71% of women<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n48\" aria-label=\"Note 48\">48<\/a><\/sup>.<\/p><h3 class=\"nrp-h3\">What would move it<\/h3><p class=\"nrp-p\">The next ITU estimates, the 2030 connectivity targets in the Global Digital Compact and the pace of affordable mobile data in low-income countries would each move this finding<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n48\" aria-label=\"Note 48\">48<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n31\" id=\"nx-nrp-gs-13-c2-r31\" aria-label=\"Note 31\">31<\/a><\/sup>.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s2\" aria-labelledby=\"nx-nrp-gs-13-c2-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s2-h\"><span class=\"nrp-num\">2.2<\/span><span>Infrastructure<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-001<\/a><\/p><p class=\"nrp-find-t\">An estimated 6 billion people (74%) use the Internet in 2025, up from 5.8 billion (71%) in 2024; 2.2 billion remain offline, and use is 94% in high-income countries against 23% in low-income countries.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-005\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-005\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-005<\/a><\/p><p class=\"nrp-find-t\">The catalogue of known exploited vulnerabilities held 1,767 entries on 3 November 2026, of which 361 are flagged as used in ransomware campaigns; 283 entries were added in 2026 by that date against 245 in 2025. The NVD published 48,150 records in 2025 against 39,953 in 2024, excluding rejected records.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n7\" id=\"nx-nrp-gs-13-c2-r7\" aria-label=\"Note 7\">7<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n8\" id=\"nx-nrp-gs-13-c2-r8\" aria-label=\"Note 8\">8<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-008\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-008\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-008<\/a><\/p><p class=\"nrp-find-t\">Submarine cables suffer about 200 faults a year, over 80% caused by fishing and anchoring according to the ITU, while the Internet Society reports that most are natural or human error; the two issuers also differ on the share of international traffic carried (over 99% against 97 to 98%).<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n12\" id=\"nx-nrp-gs-13-c2-r12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n13\" id=\"nx-nrp-gs-13-c2-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-011\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-011\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-INF-011<\/a><\/p><p class=\"nrp-find-t\">The vendor\u2019s root cause analysis of the July 2024 content update failure found a mismatch between 21 inputs validated and 20 supplied, which caused an out-of-bounds read and system crashes on endpoints; the World Bank notes that cloud market concentration can pose systemic risks to vital sectors.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n14\" id=\"nx-nrp-gs-13-c2-r14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n30\" id=\"nx-nrp-gs-13-c2-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s3\" aria-labelledby=\"nx-nrp-gs-13-c2-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s3-h\"><span class=\"nrp-num\">2.3<\/span><span>Data and digital<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-002\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-002\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-002<\/a><\/p><p class=\"nrp-find-t\">Victims in the United States filed 1,008,597 complaints with the FBI in 2025 and reported USD 20.877 billion in losses, up 26%; cyber-enabled fraud was 45% of complaints.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n2\" id=\"nx-nrp-gs-13-c2-r2\" aria-label=\"Note 2\">2<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-004\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-004\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-DAT-004<\/a><\/p><p class=\"nrp-find-t\">ENISA analysed 4,875 incidents from July 2024 to June 2025: <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> opened about 60% of intrusions, exploitation of vulnerabilities 21.3%, and hacktivism made up almost 80% of recorded incidents, mostly low-impact denial of service.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n3\" id=\"nx-nrp-gs-13-c2-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s4\" aria-labelledby=\"nx-nrp-gs-13-c2-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s4-h\"><span class=\"nrp-num\">2.4<\/span><span>Finance<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-FIN-003\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-FIN-003\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-FIN-003<\/a><\/p><p class=\"nrp-find-t\">On-chain ransomware payments were about USD 820 million in 2025, down about 8%, while claimed attacks rose 50%; the FBI recorded 3,611 ransomware complaints with reported losses of more than USD 32 million. The two series measure different things.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n29\" id=\"nx-nrp-gs-13-c2-r29\" aria-label=\"Note 29\">29<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s5\" aria-labelledby=\"nx-nrp-gs-13-c2-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s5-h\"><span class=\"nrp-num\">2.5<\/span><span>Governance<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-006\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-006\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-006<\/a><\/p><p class=\"nrp-find-t\">The 2024 Global Cybersecurity Index covered 194 countries with an average score of 65.7 out of 100; 139 had a national incident response team and 55 did not, and 46 countries sit in the highest of five tiers.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n4\" id=\"nx-nrp-gs-13-c2-r4\" aria-label=\"Note 4\">4<\/a><\/sup><\/p><\/li><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-007\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-007\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-GOV-007<\/a><\/p><p class=\"nrp-find-t\">The UN Convention against Cybercrime was adopted on 24 December 2024 and opened for signature on 25 October 2025; at the access date it had 96 signatories and 3 States Parties against the 40 needed for entry into force.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n9\" id=\"nx-nrp-gs-13-c2-r9\" aria-label=\"Note 9\">9<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n10\" id=\"nx-nrp-gs-13-c2-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s6\" aria-labelledby=\"nx-nrp-gs-13-c2-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s6-h\"><span class=\"nrp-num\">2.6<\/span><span>Health<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-HLT-009\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-HLT-009\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-HLT-009<\/a><\/p><p class=\"nrp-find-t\">From 2016 to 2021, 374 ransomware attacks on US health care delivery organisations exposed the data of nearly 42 million patients; annual attacks rose from 43 to 91 and 44.4% disrupted care.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n23\" id=\"nx-nrp-gs-13-c2-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s7\" aria-labelledby=\"nx-nrp-gs-13-c2-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s7-h\"><span class=\"nrp-num\">2.7<\/span><span>AIC<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-AIC-010\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-AIC-010\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-AIC-010<\/a><\/p><p class=\"nrp-find-t\">ENISA reports that AI-supported <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> reportedly made up more than 80% of observed social engineering activity worldwide by early 2025, and in the WEF survey 87% of respondents named AI-related vulnerabilities as the fastest-growing risk; a 2024 preprint found that one model exploited 87% of 15 one-day vulnerabilities.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n5\" id=\"nx-nrp-gs-13-c2-r5\" aria-label=\"Note 5\">5<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c2-n24\" id=\"nx-nrp-gs-13-c2-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-s8\" aria-labelledby=\"nx-nrp-gs-13-c2-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-s8-h\"><span class=\"nrp-num\">2.8<\/span><span>Systemic<\/span><\/h2><ol class=\"nrp-find\"><li id=\"nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-SYS-012\"><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><a class=\"nrp-find-id\" href=\"#nx-NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-SYS-012\">NRF-SECTOR-CYBER-GLOBAL-2026-BASELINE-SYS-012<\/a><\/p><p class=\"nrp-find-t\">The leading compound pathway for 2027 testing is a failure at a concentrated digital provider that coincides with a ransomware wave on health and public services and a loss of connectivity. \u00a7 scenario<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c2-notes\" aria-labelledby=\"nx-nrp-gs-13-c2-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c2-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c2-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n31\"><span class=\"nrp-notes-n\">31<\/span><span>United Nations General Assembly (ed.), Global Digital Compact, A\/79\/L.2 (September 2024). United Nations, New York. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r31\" aria-label=\"Back to the first call of note 31\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), National Vulnerability Database, CVE API version 2.0 (records published in 2024 and in 2025, excluding rejected records, counted by the editors from four quarterly queries per year; 39,953 and 48,150). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r8\" aria-label=\"Back to the first call of note 8\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n10\"><span class=\"nrp-notes-n\">10<\/span><span>United Nations General Assembly (ed.), Resolution 80\/16 on the final report of the open-ended working group on security of and in the use of information and communications technologies (endorses A\/80\/257; Global Mechanism from 2026). United Nations, New York, December 2025. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c2-n24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c2-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-systems-and-sectors\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c3-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 3<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Systems and sectors at baseline<\/h2><p class=\"nrp-chap-meta\"><span>7 min read<\/span><span>0 figures<\/span><span>2 tables<\/span><span>19 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c3-s1\" aria-labelledby=\"nx-nrp-gs-13-c3-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c3-s1-h\"><span class=\"nrp-num\">3.1<\/span><span>Where each system stood at evidence close<\/span><\/h2><div class=\"pp-cells nrp-cells-3\"><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">INF \u00b7 Connectivity<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">People using the Internet<\/h3><span class=\"pp-metric\">74<\/span><span class=\"nrp-cell-u\">%<\/span><p>6 billion; 2.2 billion offline.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2025<\/span><span>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n48\" id=\"nx-nrp-gs-13-c3-r48\" aria-label=\"Note 48\">48<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">DAT \u00b7 Data<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Losses reported to the FBI by victims in the United States<\/h3><span class=\"pp-metric\">20.9<\/span><span class=\"nrp-cell-u\">USD billion<\/span><p>1,008,597 complaints; losses up 26%.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2025<\/span><span>FBI IC3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n2\" id=\"nx-nrp-gs-13-c3-r2\" aria-label=\"Note 2\">2<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">FIN \u00b7 Finance<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">On-chain ransomware payments<\/h3><span class=\"pp-metric\">820<\/span><span class=\"nrp-cell-u\">USD million<\/span><p>down about 8%; claimed attacks up 50%.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2025<\/span><span>Chainalysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n29\" id=\"nx-nrp-gs-13-c3-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">INF \u00b7 Infrastructure<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Entries in the known exploited vulnerabilities catalogue<\/h3><span class=\"pp-metric\">1,767<\/span><span class=\"nrp-cell-u\">entries<\/span><p>361 flagged as used in ransomware campaigns.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2026<\/span><span>CISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n7\" id=\"nx-nrp-gs-13-c3-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">GOV \u00b7 Governance<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Countries with a national incident response team<\/h3><span class=\"pp-metric\">139<\/span><span class=\"nrp-cell-u\">of 194<\/span><p>55 had none or none in progress.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2024<\/span><span>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n4\" id=\"nx-nrp-gs-13-c3-r4\" aria-label=\"Note 4\">4<\/a><\/sup><\/span><\/p><\/article><article class=\"nrp-cell\"><p class=\"nf-ui-eyebrow\">SYS \u00b7 Cross-system<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Survey respondents naming AI-related vulnerabilities as the fastest-growing risk<\/h3><span class=\"pp-metric\">87<\/span><span class=\"nrp-cell-u\">%<\/span><p>perception in an executive survey, not a measured rate.<\/p><p class=\"nrp-cell-foot\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span>2026<\/span><span>WEF<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n5\" id=\"nx-nrp-gs-13-c3-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/span><\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c3-s2\" aria-labelledby=\"nx-nrp-gs-13-c3-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c3-s2-h\"><span class=\"nrp-num\">3.2<\/span><span>Domain posture<\/span><\/h2><p class=\"nrp-stand\">Each of the twelve coupled domains is read through cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, in words, not scored. The coupling column names the dependency that carries cyber and digital systems risk into each domain.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c3-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 3.1<\/span><span class=\"nrp-tbl-t\">Each domain read in words, not scored<\/span><\/caption><thead><tr><th scope=\"col\">Domain<\/th><th scope=\"col\">Posture at baseline<\/th><th scope=\"col\">Coupling<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">WAT<\/span><\/td><td>Treatment, pumping and distribution depend on control systems and telemetry; the EU lists drinking and waste water as sectors under its cyber law, and a joint advisory names the sector among those where state-sponsored actors were found. Incident counts are not consolidated here.<\/td><td><span class=\"nrp-mono\">INF \u2192 WAT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">ENE<\/span><\/td><td>Grid and fuel operations run on digital control; a joint advisory reports pre-positioning on networks of energy providers and the EU lists energy under its cyber law. Operational incident data are not consolidated here.<\/td><td><span class=\"nrp-mono\">INF \u2192 ENE<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">FOO<\/span><\/td><td>Cold chains, traceability and logistics run on software; no consolidated series of digital incidents in food systems was found.<\/td><td><span class=\"nrp-mono\">INF \u2192 FOO<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">HLT<\/span><\/td><td>374 ransomware attacks on US providers in 2016 to 2021 exposed nearly 42 million patients and 44.4% disrupted care.<\/td><td><span class=\"nrp-mono\">INF \u2192 HLT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">BIO<\/span><\/td><td>Monitoring networks and sensor data support nature observation; the evidence is not consolidated here.<\/td><td><span class=\"nrp-mono\">DAT \u2192 BIO<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">CLI<\/span><\/td><td>Weather and climate services depend on data links and compute; no consolidated cyber evidence for these services was found.<\/td><td><span class=\"nrp-mono\">DAT \u2192 CLI<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">INF<\/span><\/td><td>Networks, cables, devices and software carry the layer: 74% of people online, about 200 cable faults a year and a 2024 update failure show how concentration cascades.<\/td><td><span class=\"nrp-mono\">the core system<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">FIN<\/span><\/td><td>USD 20.877 billion in US victim-reported losses; USD 820 million in on-chain ransomware payments; EU financial entities fall under DORA from 17 January 2025.<\/td><td><span class=\"nrp-mono\">DAT \u2192 FIN<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">DAT<\/span><\/td><td>Data are the target and the evidence: incident data are voluntary, partial and not on a common basis worldwide.<\/td><td><span class=\"nrp-mono\">the core system<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">AIC<\/span><\/td><td>AI changes both attack and defence: reported AI-supported <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a>, a survey of fast-growing AI vulnerabilities and an exploit study on one-day flaws; measured effects are thin.<\/td><td><span class=\"nrp-mono\">AIC \u2192 DAT<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">MIN<\/span><\/td><td>Chips, cables and devices rest on materials and manufacturing; no consolidated cyber evidence for these supply chains was found in this edition.<\/td><td><span class=\"nrp-mono\">MIN \u2192 INF<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 2<\/span><\/td><\/tr><tr><td><span class=\"nrp-mono\">TRD<\/span><\/td><td>Cable routes carry over 97% of international data traffic by two issuers\u2019 estimates; maritime and logistics were a high-value target in the EU threat data.<\/td><td><span class=\"nrp-mono\">INF \u2194 TRD<\/span><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span> <span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c3-s3\" aria-labelledby=\"nx-nrp-gs-13-c3-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c3-s3-h\"><span class=\"nrp-num\">3.3<\/span><span>Sector screens<\/span><\/h2><p class=\"nrp-stand\">All sixteen sectors are screened for their dependence on cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, on the same grammar as every national edition. The evidence column describes coverage of the baseline evidence, not the performance of the sector.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c3-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 3.2<\/span><span class=\"nrp-tbl-t\">Sectors: baseline evidence and the exposure to watch<\/span><\/caption><thead><tr><th scope=\"col\">Code<\/th><th scope=\"col\">Sector<\/th><th scope=\"col\">Baseline evidence<\/th><th scope=\"col\">Exposure to watch<\/th><th scope=\"col\">Evidence coverage<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">GS-00<\/span><\/td><td>Cross-system<\/td><td>one digital layer under every system<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n30\" id=\"nx-nrp-gs-13-c3-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/td><td>concentrated provider failure<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-01<\/span><\/td><td>Water<\/td><td>control systems named in advisories<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n26\" id=\"nx-nrp-gs-13-c3-r26\" aria-label=\"Note 26\">26<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n19\" id=\"nx-nrp-gs-13-c3-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>treatment control compromise<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-02<\/span><\/td><td>Energy<\/td><td>grid operators fall under EU cyber law<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td>attack on control systems<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-03<\/span><\/td><td>Food and Agrifood Systems<\/td><td>traceability and cold-chain software; no series<\/td><td>logistics outage<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-04<\/span><\/td><td>Health and <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 one-health\" data-tk=\"Nexus risk vocabulary\" data-td=\"An integrated approach that recognises the health of people, animals, plants and ecosystems as interdependent and manages risks across them together.\" data-ts=\"NRS-C1\" data-tr=\"draft\">One Health<\/a><\/td><td>374 attacks on US providers, 2016 to 2021<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n23\" id=\"nx-nrp-gs-13-c3-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td>ransomware and care delivery<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-05<\/span><\/td><td>Finance and Economy<\/td><td>USD 20.877 billion in US losses<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n2\" aria-label=\"Note 2\">2<\/a><\/sup>; DORA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n21\" id=\"nx-nrp-gs-13-c3-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><td>payment and fraud<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-06<\/span><\/td><td>Development and Humanitarian<\/td><td>2.2 billion offline<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n48\" aria-label=\"Note 48\">48<\/a><\/sup>; 313 shutdowns<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n27\" id=\"nx-nrp-gs-13-c3-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><td>access and disconnection<\/td><td>GOOD<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-07<\/span><\/td><td>Climate and Earth Systems<\/td><td>no consolidated cyber evidence found<\/td><td>data link loss<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-08<\/span><\/td><td>Disaster and Resilience<\/td><td>2024 update failure<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n14\" id=\"nx-nrp-gs-13-c3-r14\" aria-label=\"Note 14\">14<\/a><\/sup>; cable faults<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n12\" id=\"nx-nrp-gs-13-c3-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><td>cascading outage<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-09<\/span><\/td><td>Infrastructure, Transport and Logistics<\/td><td>about 200 cable faults a year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n12\" aria-label=\"Note 12\">12<\/a><\/sup>; maritime targets<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n3\" id=\"nx-nrp-gs-13-c3-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>route and port disruption<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-10<\/span><\/td><td>Cities and Urban Systems<\/td><td>urban Internet use 85%, rural 58%<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><td>service dependence<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-11<\/span><\/td><td>Biodiversity and Ecosystems<\/td><td>monitoring networks only; no figure<\/td><td>sensor and data loss<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-12<\/span><\/td><td>Earth Observation and Planetary Intelligence<\/td><td>space dependence named by 15% of survey respondents<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n5\" aria-label=\"Note 5\">5<\/a><\/sup><\/td><td>loss of data links<\/td><td>THIN<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-13<\/span><\/td><td>Cyber and Digital Systems<\/td><td>this edition; twelve findings<\/td><td>provider failure under ransomware<\/td><td>PARTIAL<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-14<\/span><\/td><td>Policy, Institutions and Governance<\/td><td>194 countries in the index<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n4\" aria-label=\"Note 4\">4<\/a><\/sup>; UN treaty<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n9\" id=\"nx-nrp-gs-13-c3-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>law and capacity gaps<\/td><td>GOOD<\/td><\/tr><tr><td><span class=\"nrp-mono\">GS-15<\/span><\/td><td>Science and Engineering Frontier<\/td><td>post-quantum standards<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n16\" id=\"nx-nrp-gs-13-c3-r16\" aria-label=\"Note 16\">16<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n17\" id=\"nx-nrp-gs-13-c3-r17\" aria-label=\"Note 17\">17<\/a><\/sup>; exploit study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c3-n24\" id=\"nx-nrp-gs-13-c3-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><td>cryptographic transition<\/td><td>PARTIAL<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c3-notes\" aria-labelledby=\"nx-nrp-gs-13-c3-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c3-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c3-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n27\"><span class=\"nrp-notes-n\">27<\/span><span>Access Now and the #KeepItOn coalition (eds.), Rising Repression Meets Global Resistance: Internet Shutdowns in 2025 (annual report, March 2026). Access Now, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n16\"><span class=\"nrp-notes-n\">16<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (13 August 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n17\"><span class=\"nrp-notes-n\">17<\/span><span>NIST (ed.), Post-Quantum Cryptography standardisation project page (FIPS 203, 204 and 205 published 13 August 2024; HQC selected 11 March 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c3-n24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c3-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-risk-and-capability\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c4-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 4<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Risks and capability<\/h2><p class=\"nrp-lede\">Four cyber and digital systems risk objects open the portfolio. Order carries no rank. Each is read across driver, exposure, vulnerability, capacity, cascade and consequence.<\/p><p class=\"nrp-chap-meta\"><span>6 min read<\/span><span>0 figures<\/span><span>1 table<\/span><span>25 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c4-s1\" aria-labelledby=\"nx-nrp-gs-13-c4-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c4-s1-h\"><span class=\"nrp-num\">4.1<\/span><span>Risk objects<\/span><\/h2><p class=\"nrp-stand\">Each risk is read across the chain from hazard to consequence, with its status and evidence-quality level.<\/p><ol class=\"nrp-find\"><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><span class=\"nrp-find-id\">RSK-GS13-INF-001<\/span><\/p><h3 class=\"nrp-h4\">Concentrated provider or software update failure<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>a faulty update or outage at a provider used across sectors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n14\" id=\"nx-nrp-gs-13-c4-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>endpoints, cloud services and managed platforms in many sectors<\/dd><dt>Vulnerability<\/dt><dd>market concentration and dependence on single vendors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n30\" id=\"nx-nrp-gs-13-c4-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/dd><dt>Capacity<\/dt><dd>staged roll-outs; test environments; vendor root cause reporting<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>INF \u2192 HLT, FIN, TRD<\/dd><dt>Horizon<\/dt><dd>1 to 3 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 4<\/span><span class=\"nrp-find-id\">RSK-GS13-DAT-002<\/span><\/p><h3 class=\"nrp-h4\">Ransomware and extortion against essential services<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>ransomware-as-a-service, access brokers and extortion<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" id=\"nx-nrp-gs-13-c4-r3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n29\" id=\"nx-nrp-gs-13-c4-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>health care, public administration, manufacturing and logistics<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n2\" id=\"nx-nrp-gs-13-c4-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n23\" id=\"nx-nrp-gs-13-c4-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/dd><dt>Vulnerability<\/dt><dd>unpatched known flaws; weak backups; thin staffing<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n7\" id=\"nx-nrp-gs-13-c4-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/dd><dt>Capacity<\/dt><dd>incident reporting duties; response teams; payment tracing<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n19\" id=\"nx-nrp-gs-13-c4-r19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n21\" id=\"nx-nrp-gs-13-c4-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>DAT \u2192 HLT, FIN, INF<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><span class=\"nrp-find-id\">RSK-GS13-INF-003<\/span><\/p><h3 class=\"nrp-h4\">Submarine cable and connectivity disruption<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>fishing, anchoring, natural hazards and hostile acts<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n12\" id=\"nx-nrp-gs-13-c4-r12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n13\" id=\"nx-nrp-gs-13-c4-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>regions served by few routes and landing points<\/dd><dt>Vulnerability<\/dt><dd>limited repair vessels and long repair times<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/dd><dt>Capacity<\/dt><dd>route diversity; regional repair arrangements; the ITU advisory body<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>INF \u2192 FIN, HLT, TRD<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><li><p class=\"nrp-find-m\"><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><span class=\"nrp-eql\" title=\"Evidence-quality level, 1 to 5\">EQL 3<\/span><span class=\"nrp-find-id\">RSK-GS13-AIC-004<\/span><\/p><h3 class=\"nrp-h4\">Faster exploitation and AI-supported intrusion<\/h3><dl class=\"nrp-dl\"><dt>Driver<\/dt><dd>AI-supported <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> and automated exploitation of known flaws<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n24\" id=\"nx-nrp-gs-13-c4-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/dd><dt>Exposure<\/dt><dd>organisations with slow patching and large attack surfaces<\/dd><dt>Vulnerability<\/dt><dd>days between disclosure and exploitation<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/dd><dt>Capacity<\/dt><dd>basic hygiene; patch discipline; AI security assessment, now done by 64% of surveyed organisations<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n5\" id=\"nx-nrp-gs-13-c4-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/dd><dt>Cascade<\/dt><dd>AIC \u2192 DAT \u2192 FIN, HLT<\/dd><dt>Horizon<\/dt><dd>1 to 5 years<\/dd><\/dl><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c4-s2\" aria-labelledby=\"nx-nrp-gs-13-c4-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c4-s2-h\"><span class=\"nrp-num\">4.2<\/span><span>Capability ladder<\/span><\/h2><p class=\"nrp-stand\">Existence is not readiness. Each of the fifteen capability functions is placed on the ladder by the strongest public evidence for cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> at the global level.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c4-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 4.1<\/span><span class=\"nrp-tbl-t\">Capabilities on the ladder of evidence: listed, exists, demonstrated, tested<\/span><\/caption><thead><tr><th scope=\"col\">Function<\/th><th scope=\"col\">Rung<\/th><th scope=\"col\">Level<\/th><th scope=\"col\">Strongest public evidence at baseline<\/th><\/tr><\/thead><tbody><tr><td>Prevention and mitigation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>frameworks and hygiene guidance widespread; implementation uneven<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n15\" id=\"nx-nrp-gs-13-c4-r15\" aria-label=\"Note 15\">15<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><\/tr><tr><td>Monitoring and observation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>ADEQUATE<\/td><td>catalogues of exploited flaws and shared threat data; coverage thin outside the US and Europe<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n7\" aria-label=\"Note 7\">7<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 early-warning\" data-tk=\"Nexus risk vocabulary\" data-td=\"Timely, actionable information about an impending hazard that lets people and institutions act to reduce harm before it occurs.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Early warning<\/a><\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>joint advisories and vulnerability catalogues; no common global warning standard<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n25\" id=\"nx-nrp-gs-13-c4-r25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n26\" id=\"nx-nrp-gs-13-c4-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><\/tr><tr><td>Preparedness and planning<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>national strategies and response teams in 139 of 194 countries<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n4\" id=\"nx-nrp-gs-13-c4-r4\" aria-label=\"Note 4\">4<\/a><\/sup><\/td><\/tr><tr><td>Redundancy and reserves<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>route diversity and spare capacity documented; repair capacity short<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><\/tr><tr><td>Response<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><\/span><\/td><td>DEMONSTRATED<\/td><td>sensor recovery to about 99% within weeks after the 2024 update failure; asset freezes by the FBI<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>Continuity of critical services<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>sector duties in law; testing under real conditions not consolidated<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><\/tr><tr><td>Recovery<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><\/span><\/td><td>DEMONSTRATED<\/td><td>endpoints restored after the 2024 failure; ransomware recovery uneven<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><\/tr><tr><td>Adaptation<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>transition to post-quantum cryptography standards under way<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n16\" id=\"nx-nrp-gs-13-c4-r16\" aria-label=\"Note 16\">16<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n17\" id=\"nx-nrp-gs-13-c4-r17\" aria-label=\"Note 17\">17<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n18\" id=\"nx-nrp-gs-13-c4-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 social-protection\" data-tk=\"Nexus risk vocabulary\" data-td=\"Public policies and programmes that help people manage risk and reduce poverty and vulnerability across their lives.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Social protection<\/a><\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>victim support and fraud recovery documented but not consolidated<\/td><\/tr><tr><td>Finance and insurance<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>financial-sector resilience law applies from 2025; insurance evidence not opened<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n21\" aria-label=\"Note 21\">21<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n38\" id=\"nx-nrp-gs-13-c4-r38\" aria-label=\"Note 38\">38<\/a><\/sup><\/td><\/tr><tr><td>Institutional coordination<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>EU reporting channels; UN Global Mechanism from 2026; treaty not yet in force<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n10\" id=\"nx-nrp-gs-13-c4-r10\" aria-label=\"Note 10\">10<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n9\" id=\"nx-nrp-gs-13-c4-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><\/tr><tr><td>Technical infrastructure<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i data-on=\"true\"><\/i><i><\/i><i><\/i><\/span><\/td><td>EXISTS<\/td><td>5G covers 55% of people and 3G or better 96%; low-income coverage far lower<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n48\" id=\"nx-nrp-gs-13-c4-r48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Workforce<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i data-on=\"true\"><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>LISTED<\/td><td>skills shortages reported; no workforce gap estimate published in 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n6\" id=\"nx-nrp-gs-13-c4-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><\/tr><tr><td>Research capacity<\/td><td><span class=\"nrp-ladder\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><i><\/i><\/span><\/td><td>ADEQUATE<\/td><td>strong applied research and published standards; open incident data thin<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n16\" aria-label=\"Note 16\">16<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c4-n24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"4\">A capability listed in policy is not a tested one; each rung is the strongest public evidence at baseline.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c4-notes\" aria-labelledby=\"nx-nrp-gs-13-c4-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c4-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c4-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n15\"><span class=\"nrp-notes-n\">15<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n25\"><span class=\"nrp-notes-n\">25<\/span><span>CISA, FBI, NSA and partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, joint cybersecurity advisory (27 August 2025). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n16\"><span class=\"nrp-notes-n\">16<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (13 August 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n17\"><span class=\"nrp-notes-n\">17<\/span><span>NIST (ed.), Post-Quantum Cryptography standardisation project page (FIPS 203, 204 and 205 published 13 August 2024; HQC selected 11 March 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n18\"><span class=\"nrp-notes-n\">18<\/span><span>Moody, D. et al., Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (November 2024; proposes deprecation after 2030 and disallowance after 2035 for quantum-vulnerable algorithms; a draft). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: IBM (ed.), Cost of a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Report 2025; gated and no figure is used. IBM, Armonk. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r38\" aria-label=\"Back to the first call of note 38\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n10\"><span class=\"nrp-notes-n\">10<\/span><span>United Nations General Assembly (ed.), Resolution 80\/16 on the final report of the open-ended working group on security of and in the use of information and communications technologies (endorses A\/80\/257; Global Mechanism from 2026). United Nations, New York, December 2025. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c4-n6\"><span class=\"nrp-notes-n\">6<\/span><span>ISC2 (ed.), 2025 ISC2 Cybersecurity Workforce Study (December 2025; 16,029 respondents; states that it includes no estimate of the workforce gap). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c4-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-scenario\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c5-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 5<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Provider failure under a ransomware wave<\/h2><p class=\"nrp-lede\">A conditional statement under stated assumptions, never a prediction.<\/p><p class=\"nrp-chap-meta\"><span>2 min read<\/span><span>0 figures<\/span><span>0 tables<\/span><span>3 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c5-s1\" aria-labelledby=\"nx-nrp-gs-13-c5-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c5-s1-h\"><span class=\"nrp-num\">5.1<\/span><span>Assumptions<\/span><\/h2><p class=\"nrp-stand\">Scenario SCN-GS13-CPF-01: what is assumed, and what is held constant.<\/p><dl class=\"nrp-dl\"><dt>Baseline<\/dt><dd>the 2026 reference state in this edition<\/dd><dt>Drivers<\/dt><dd>a faulty update or outage at a provider used across sectors that coincides with a ransomware wave on health and public services and a loss of connectivity on one regional route<\/dd><dt>Analogues<\/dt><dd>the July 2024 content update failure<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c5-n14\" id=\"nx-nrp-gs-13-c5-r14\" aria-label=\"Note 14\">14<\/a><\/sup>; health ransomware attacks of 2016 to 2021<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c5-n23\" id=\"nx-nrp-gs-13-c5-r23\" aria-label=\"Note 23\">23<\/a><\/sup>; cable faults<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c5-n12\" id=\"nx-nrp-gs-13-c5-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/dd><dt>Interventions<\/dt><dd>none modelled: the specification describes the unmitigated case<\/dd><dt>Run state<\/dt><dd>narrative specification; quantified run scheduled for 2027<\/dd><\/dl><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c5-s2\" aria-labelledby=\"nx-nrp-gs-13-c5-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c5-s2-h\"><span class=\"nrp-num\">5.2<\/span><span>The cascade, step by step<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">1<\/span><p class=\"nrp-rows-t\">INF \u2192 ALL<\/p><p class=\"nrp-rows-x\">a faulty update disables endpoints in several sectors at once<\/p><p class=\"nrp-rows-m\">2024<\/p><\/li><li><span class=\"nrp-rows-i\">2<\/span><p class=\"nrp-rows-t\">DAT \u2192 HLT<\/p><p class=\"nrp-rows-x\">ransomware hits hospitals while recovery teams are busy elsewhere<\/p><p class=\"nrp-rows-m\">2016 to 2021<\/p><\/li><li><span class=\"nrp-rows-i\">3<\/span><p class=\"nrp-rows-t\">INF \u2192 TRD<\/p><p class=\"nrp-rows-x\">a cable fault cuts redundancy for one region<\/p><p class=\"nrp-rows-m\">annual<\/p><\/li><li><span class=\"nrp-rows-i\">4<\/span><p class=\"nrp-rows-t\">INF \u2192 ENE<\/p><p class=\"nrp-rows-x\">control and billing <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> are degraded or switched to manual operation<\/p><p class=\"nrp-rows-m\">not observed here<\/p><\/li><li><span class=\"nrp-rows-i\">5<\/span><p class=\"nrp-rows-t\">DAT \u2192 FIN<\/p><p class=\"nrp-rows-x\">payment and fraud handling is interrupted<\/p><p class=\"nrp-rows-m\">2025<\/p><\/li><li><span class=\"nrp-rows-i\">6<\/span><p class=\"nrp-rows-t\">HLT \u2192 INF<\/p><p class=\"nrp-rows-x\">clinics fall back to paper while data recovery is delayed<\/p><p class=\"nrp-rows-m\">2016 to 2021<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c5-s3\" aria-labelledby=\"nx-nrp-gs-13-c5-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c5-s3-h\"><span class=\"nrp-num\">5.3<\/span><span>The scenario as a table of steps<\/span><\/h2><p class=\"nx-p\">How the shock in scenario SCN-GS13-CPF-01 would travel through Global Cyber and Digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">Systems<\/a>&#8216;s coupled systems, step by step, under the assumptions the edition states.<\/p><div class=\"nx-table-wrap\"><table class=\"nx-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Step\">01 Infrastructure to all<\/td><td data-label=\"What happens\">A faulty update disables endpoints in several sectors at once. Analogue or source: 2024.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 1<\/td><\/tr><tr><td data-label=\"Step\">02 DAT to health<\/td><td data-label=\"What happens\">Ransomware hits hospitals while recovery teams are busy elsewhere. Analogue or source: 2016 to 2021.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 2<\/td><\/tr><tr><td data-label=\"Step\">03 Infrastructure to trade<\/td><td data-label=\"What happens\">A cable fault cuts redundancy for one region. Analogue or source: annual.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 3<\/td><\/tr><tr><td data-label=\"Step\">04 Infrastructure to energy<\/td><td data-label=\"What happens\">Control and billing systems are degraded or switched to manual operation. Analogue or source: not observed here.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 4<\/td><\/tr><tr><td data-label=\"Step\">05 DAT to finance<\/td><td data-label=\"What happens\">Payment and fraud handling is interrupted. Analogue or source: 2025.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 5<\/td><\/tr><tr><td data-label=\"Step\">06 Health to infrastructure<\/td><td data-label=\"What happens\">Clinics fall back to paper while data recovery is delayed. Analogue or source: 2016 to 2021.<\/td><td data-label=\"Source\">Edition GS-13, scenario SCN-GS13-CPF-01, step 6<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-note nx-mt-2\">A teaching model of a conditional scenario under the edition&#8217;s stated assumptions: not a forecast, not a prediction and not a warning. Sources: <a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/scenario\/\" rel=\"noopener\">Global Cyber and Digital Systems 2026, scenario SCN-GS13-CPF-01<\/a> (2026); Global Cyber and Digital Systems 2026, references (NR-CIT-1) (2026).<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c5-notes\" aria-labelledby=\"nx-nrp-gs-13-c5-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c5-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c5-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c5-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c5-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c5-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c5-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c5-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-lenses-and-readings\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c6-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 6<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Readings from the other desks<\/h2><p class=\"nrp-lede\">The cyber and digital systems baseline is read through each steward\u2019s lens, then once as a whole. Each lens is a projection of reviewed findings, not a separate argument. The other desks&#8217; own editions of this subject are listed first, as cross-references, not copies.<\/p><p class=\"nrp-chap-meta\"><span>17 min read<\/span><span>0 figures<\/span><span>8 tables<\/span><span>45 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s1\" aria-labelledby=\"nx-nrp-gs-13-c6-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s1-h\"><span class=\"nrp-num\">6.1<\/span><span>The other desks&#8217; editions of this subject<\/span><\/h2><p class=\"nrp-stand\">Federation: each desk writes its own edition for the subjects in its remit. Until a desk releases, its edition shows its frame and the reading this edition printed for it.<\/p><div class=\"nrp-tblw\"><table class=\"nrp-tbl\"><thead><tr><th scope=\"col\">Desk<\/th><th scope=\"col\">Edition<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Identifier<\/th><\/tr><\/thead><tbody><tr data-host=\"true\"><th scope=\"row\">GCRI Systems Evidence<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">GRF Public Deliberation<\/th><td>Outside this desk&#8217;s remit<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in remit<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">GRA Capital Readiness<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Standards Progress<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Academy Capability<\/th><td>No edition of this subject at this desk in the 2026 Baseline cycle<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in this cycle<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><tr><th scope=\"row\">Index Measurement<\/th><td>Outside this desk&#8217;s remit<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Not in remit<\/span><\/td><td class=\"nrp-mono\"><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s2\" aria-labelledby=\"nx-nrp-gs-13-c6-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s2-h\"><span class=\"nrp-num\">6.2<\/span><span>Three lenses<\/span><\/h2><p class=\"nrp-stand\">One edition, read by each steward. The lens of this site comes first.<\/p><div class=\"nrp-cards\" data-n=\"3\"><article class=\"nf-ui-card nrp-card\" data-host=\"true\"><p class=\"nf-ui-eyebrow\">GCRI \u00b7 KEY T<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Technical Truth<\/h3><p>The evidence supports reading the digital layer as the coupling layer of the WEFH+B system. Connection is spreading, crime follows it, and concentration is the structural risk. Evidence is strongest for connectivity and for US and EU incident data, and weakest for utility incidents and for losses outside the United States.<\/p><p class=\"nrp-note\">INF-001 \u00b7 DAT-004 \u00b7 INF-011 \u00b7 SYS-012<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GRF \u00b7 KEY M<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Public Meaning<\/h3><p>For most people cyber risk arrives as a scam, a locked hospital system or a service that stops. The baseline asks that public debate keep the 2.2 billion people offline in view alongside the security story, and treat digital resilience as shared infrastructure.<\/p><p class=\"nrp-note\">INF-001 \u00b7 DAT-002 \u00b7 HLT-009<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">GRA \u00b7 KEY F<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Capital Meaning<\/h3><p>Readiness implications only. Reported losses are large, ransomware payments are volatile and law now sets reporting duties for financial entities and essential services<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n2\" id=\"nx-nrp-gs-13-c6-r2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n29\" id=\"nx-nrp-gs-13-c6-r29\" aria-label=\"Note 29\">29<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n21\" id=\"nx-nrp-gs-13-c6-r21\" aria-label=\"Note 21\">21<\/a><\/sup>. These show where finance-readiness evidence will matter. Nothing here is advice, a rating or an approval.<\/p><p class=\"nrp-note\">DAT-002 \u00b7 FIN-003<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">NEXUS<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">Synthesis<\/h3><p>The digital layer is well measured at the level of connection and crime reports and thinly measured at the level of utility incidents, patch speed and outcomes. The 2027 programme should bind regional route evidence, test provider failure under ransomware, and bind incident data on a common basis.<\/p><p class=\"nrp-note\">SYS-012 \u00b7 C-01 \u00b7 C-02<\/p><\/article><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s3\" aria-labelledby=\"nx-nrp-gs-13-c6-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s3-h\"><span class=\"nrp-num\">6.3<\/span><span>Standards, Academy and steward contributions<\/span><\/h2><p class=\"nrp-stand\">How the <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a> drafts, the Risk Academy and the three stewards feed each quarterly edition for cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>. The standards are a preparatory working draft (2026) and are cited as drafts, never as adopted standards.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.1<\/span><span class=\"nrp-tbl-t\">The quarterly rhythm every edition follows<\/span><\/caption><thead><tr><th scope=\"col\">Quarter<\/th><th scope=\"col\">Edition<\/th><th scope=\"col\">Question<\/th><th scope=\"col\">Boundary<\/th><\/tr><\/thead><tbody><tr><td>Q1<\/td><td>State and Agenda<\/td><td>What matters this year, and what is the starting position?<\/td><td>observed baseline stays distinct from planned work<\/td><\/tr><tr><td>Q2<\/td><td>Evidence and Build<\/td><td>What new evidence and capability exist?<\/td><td>a configured capability is not a validated result<\/td><\/tr><tr><td>Q3<\/td><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 stress-test\" data-tk=\"Nexus risk vocabulary\" data-td=\"An assessment of how a system, portfolio or institution would perform under severe but plausible adverse scenarios, to find weaknesses before they are revealed by events.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Stress Test<\/a> and Readiness<\/td><td>What do scenarios and tests show?<\/td><td>simulated loss or performance is not observed impact<\/td><\/tr><tr><td>Q4<\/td><td>Annual Synthesis and Renewal<\/td><td>What changed in the year, and what renews?<\/td><td>release follows review, not event publicity deadlines<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.2<\/span><span class=\"nrp-tbl-t\">Who contributes what each quarter<\/span><\/caption><thead><tr><th scope=\"col\">Steward or body<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Contribution route<\/th><\/tr><\/thead><tbody><tr><td>GCRI Canada<\/td><td>Lead Institution and Consortium Secretariat; publisher of record; technical truth (key T)<\/td><td>science and practice communities \u00b7 GCRI gateway<\/td><\/tr><tr><td>The Global Risks Forum (GRF)<\/td><td>leadership, dialogue and the <a class=\"nx-link\" href=\"https:\/\/docs.therisk.global\/organization\/programme\/universe\">Universe<\/a> programme; public meaning (key M)<\/td><td>policy, Universe and national adoption \u00b7 GRF gateway<\/td><\/tr><tr><td>The Global Risks Alliance (GRA)<\/td><td>finance, insurance and development readiness; capital meaning (key F)<\/td><td>finance and insurance \u00b7 GRA gateway<\/td><\/tr><tr><td>Nexus Standards<\/td><td>preparatory drafts on vocabulary, hazards, indicators and methods<\/td><td>Standards site \u00b7 working groups HAZ, IND, MTH, FIN, AI<\/td><\/tr><tr><td>Risk Academy<\/td><td>learning pathways tied to the agenda questions<\/td><td>Academy gateway \u00b7 learning by review<\/td><\/tr><tr><td><a class=\"nx-link\" href=\"https:\/\/docs.therisk.global\/organization\/programme\/reports\">Reports<\/a> sector desks<\/td><td>cyber and digital chapter inputs: GCRI evidence, GRA readiness, NXS standards, RA capability<\/td><td>sector editorial board<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Standards drafts used in this edition<\/h3><ul class=\"nrp-list\"><li>Risk vocabulary NRS-C1 (424 terms) for terms in the glossary<\/li><li>Hazard atlas NHS-1 1.1.0 (905 hazards in 120 families) for risk objects<\/li><li>Seven risk classes: global, catastrophic, existential, emerging, planetary, exponential, frontier-tech<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Standards calendar to watch<\/h3><ul class=\"nrp-list\"><li>Founding calls from 20 October 2026; working groups meet from 5 November 2026<\/li><li>Inaugural Global Standards Council session, 12 January 2027<\/li><li>Quarterly reviews in March, June, September and December, aligned with each edition<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Nothing here certifies. A Nexus attestation records an evaluation under a mandate; it confers no certification, endorsement or approval. Adoption of any standard is a decision of the competent standards body.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s4\" aria-labelledby=\"nx-nrp-gs-13-c6-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s4-h\"><span class=\"nrp-num\">6.4<\/span><span>GCRI reading: the model card<\/span><\/h2><p class=\"nrp-p\">GCRI&#8217;s reading of this edition is its model card: what the national model is, what it computes and where it stops. It is printed in full in Annex A, with the methods it belongs to. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/methodology\/\">Annex A, methodology<\/a><\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s5\" aria-labelledby=\"nx-nrp-gs-13-c6-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s5-h\"><span class=\"nrp-num\">6.5<\/span><span>Global Risks Forum reading: editorial essays<\/span><\/h2><p class=\"nrp-stand\">Four signed essays by the Reports editorial team set out the positions this edition takes. They are interpretation, labelled as such; the evidence they draw on is in the findings register.<\/p><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Every large digital failure this decade has been a health event, a payments event and a services event at once. Treating cyber as a security specialism understates how it carries risk between systems. This edition asks where a digital failure goes next.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 01<\/h3><p>The digital layer is a coupling, not a sector<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">A single update, a single route or a single platform can reach many sectors. The evidence on concentration is partial and mostly qualitative. Measuring dependence on shared providers and routes is the first adaptation.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 02<\/h3><p>Concentration is the common factor<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Reporting duties for incidents, products and financial entities now apply or are scheduled, and a UN treaty has opened for signature. The data to show whether they work will take years to accumulate [9] [19] [20] [21].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 03<\/h3><p>Rules are arriving faster than outcome data<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">The 2.2 billion people offline and the countries without a national response team sit outside most security debates. Closing the gaps is not separate from resilience; it is part of it.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EDITORIAL ESSAY \u00b7 04<\/h3><p>Connection is the unfinished half<\/p><\/article><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Essays are signed views of the editorial team. Contributed articles from regional consortia, national pathways and invited experts begin with the 2027 global edition, each with its own review route and disclosures.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s6\" aria-labelledby=\"nx-nrp-gs-13-c6-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s6-h\"><span class=\"nrp-num\">6.6<\/span><span>Global Risks Alliance reading: 2027 cyber and digital systems readiness pack<\/span><\/h2><p class=\"nrp-stand\">The registers that open the 2027 global cycle. At baseline each is initialised from this edition.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.3<\/span><span class=\"nrp-tbl-t\">2027 cyber and digital systems readiness pack<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Register<\/th><th scope=\"col\">State at baseline<\/th><th scope=\"col\">First 2027 entry<\/th><\/tr><\/thead><tbody><tr><td>E1<\/td><td>Cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> risk state delta<\/td><td>baseline set by this edition<\/td><td>changes against the baseline<\/td><\/tr><tr><td>E2<\/td><td>WEFH+B state delta<\/td><td>five global system readings set<\/td><td>indicator updates and freshness<\/td><\/tr><tr><td>E3<\/td><td>Agenda and Portfolio movement<\/td><td>eight agenda items \u00b7 6 proposed objects<\/td><td>admission decisions<\/td><\/tr><tr><td>E4<\/td><td>Federation delivery register<\/td><td>national chapters in preparation<\/td><td>national chapters<\/td><\/tr><tr><td>E5<\/td><td>Consortium capability register<\/td><td>national consortia forming<\/td><td>first contributions<\/td><\/tr><tr><td>E6<\/td><td>Leadership questions and challenges<\/td><td>none yet<\/td><td>first challenge log<\/td><\/tr><tr><td>E7<\/td><td>Foundry technical state<\/td><td>national environments prepared<\/td><td>first federation cut<\/td><\/tr><tr><td>E8<\/td><td>Publication candidates<\/td><td>twelve findings carried forward<\/td><td>PUBLISH \u00b7 HOLD dispositions<\/td><\/tr><tr><td>E9<\/td><td>Universe readiness<\/td><td>one candidate mission<\/td><td>admission and role spine<\/td><\/tr><tr><td>E10<\/td><td>Correction register<\/td><td>none<\/td><td>first federation-wide cycle<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Publication dispositions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">Publish<\/li><li class=\"nf-ui-chip\">Hold<\/li><li class=\"nf-ui-chip\">Needs evidence<\/li><li class=\"nf-ui-chip\">Restricted<\/li><li class=\"nf-ui-chip\">Superseded<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Programme progress is not real-world risk improvement. These registers record the work of the Nexus programme; they report on no state or organisation.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s7\" aria-labelledby=\"nx-nrp-gs-13-c6-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s7-h\"><span class=\"nrp-num\">6.7<\/span><span>Nexus Standards reading: standards and regulatory watch<\/span><\/h2><p class=\"nrp-stand\">Instruments and published guidance that shape the <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> in this edition, by status on the retrieval date. The edition assesses no one\u2019s compliance.<\/p><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">IN FORCE<\/li><li class=\"nf-ui-chip\">ADOPTED<\/li><li class=\"nf-ui-chip\">PUBLISHED \u00b7 GUIDANCE<\/li><li class=\"nf-ui-chip\">PUBLISHED \u00b7 VOLUNTARY<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.4<\/span><span class=\"nrp-tbl-t\">Standards and regulatory watch<\/span><\/caption><thead><tr><th scope=\"col\">Instrument<\/th><th scope=\"col\">Body<\/th><th scope=\"col\">Scope<\/th><th scope=\"col\">Status<\/th><th scope=\"col\">Relevance<\/th><\/tr><\/thead><tbody><tr><td>NIS2 Directive (EU) 2022\/2555<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n19\" id=\"nx-nrp-gs-13-c6-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>European Union<\/td><td>EU<\/td><td>IN FORCE<\/td><td>essential entities<\/td><\/tr><tr><td>Cyber Resilience Act (EU) 2024\/2847<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n20\" id=\"nx-nrp-gs-13-c6-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td>European Union<\/td><td>EU<\/td><td>IN FORCE<\/td><td>products<\/td><\/tr><tr><td>Digital Operational Resilience Act (EU) 2022\/2554<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><td>European Union<\/td><td>EU<\/td><td>IN FORCE<\/td><td>financial entities<\/td><\/tr><tr><td>AI Act (EU) 2024\/1689<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n22\" id=\"nx-nrp-gs-13-c6-r22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><td>European Union<\/td><td>EU<\/td><td>IN FORCE<\/td><td>AI systems<\/td><\/tr><tr><td>UN Convention against Cybercrime<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n9\" id=\"nx-nrp-gs-13-c6-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>United Nations<\/td><td>global<\/td><td>ADOPTED 2024 \u00b7 NOT IN FORCE<\/td><td>cybercrime<\/td><\/tr><tr><td>NIST Cybersecurity Framework 2.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n15\" id=\"nx-nrp-gs-13-c6-r15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td>NIST<\/td><td>global use<\/td><td>PUBLISHED \u00b7 VOLUNTARY<\/td><td>governance<\/td><\/tr><tr><td>FIPS 203 module-lattice key encapsulation<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n16\" id=\"nx-nrp-gs-13-c6-r16\" aria-label=\"Note 16\">16<\/a><\/sup><\/td><td>NIST<\/td><td>US federal<\/td><td>PUBLISHED 2024<\/td><td>post-quantum<\/td><\/tr><tr><td>IEC 62443 control-system security<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n42\" id=\"nx-nrp-gs-13-c6-r42\" aria-label=\"Note 42\">42<\/a><\/sup><\/td><td>IEC<\/td><td>global<\/td><td>PUBLISHED \u00b7 VOLUNTARY<\/td><td>control systems<\/td><\/tr><tr><td>ISO\/IEC 27001:2022<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n41\" id=\"nx-nrp-gs-13-c6-r41\" aria-label=\"Note 41\">41<\/a><\/sup><\/td><td>ISO and IEC<\/td><td>global<\/td><td>PUBLISHED \u00b7 VOLUNTARY<\/td><td>management systems<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Changed since 2024<\/h3><ul class=\"nrp-list\"><li>The UN Convention against Cybercrime opened for signature on 25 October 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n9\" aria-label=\"Note 9\">9<\/a><\/sup><\/li><li>The UN General Assembly endorsed the final report of the working group and operationalised the Global Mechanism from 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n10\" id=\"nx-nrp-gs-13-c6-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/li><li>NIST selected a further key encapsulation algorithm for standardisation on 11 March 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n17\" id=\"nx-nrp-gs-13-c6-r17\" aria-label=\"Note 17\">17<\/a><\/sup><\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">To watch in 2027<\/h3><ul class=\"nrp-list\"><li>Ratifications of the UN Convention against Cybercrime toward the 40 needed<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n9\" aria-label=\"Note 9\">9<\/a><\/sup><\/li><li>Application of EU Cyber Resilience Act reporting duties from 11 September 2026 and the main duties from 11 December 2027<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n20\" aria-label=\"Note 20\">20<\/a><\/sup><\/li><li>Final form of the NIST timetable for retiring quantum-vulnerable algorithms<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n18\" id=\"nx-nrp-gs-13-c6-r18\" aria-label=\"Note 18\">18<\/a><\/sup><\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Status is read from the issuing body on the retrieval date. Instruments open for signature or awaiting ratification are labelled as such; a change in status opens a review task for every finding that relies on the instrument.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-s8\" aria-labelledby=\"nx-nrp-gs-13-c6-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-s8-h\"><span class=\"nrp-num\">6.8<\/span><span>Risk Academy reading: literature and evidence review, science and assessments<\/span><\/h2><p class=\"nrp-stand\">The review behind this edition covers cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> assessments, peer-reviewed science and the institutional reports that bind its findings. Systematic reviews for each agenda item begin in 2027.<\/p><h3 class=\"nrp-h3\">Review protocol<\/h3><dl class=\"nrp-dl\"><dt>Question<\/dt><dd>What does the published evidence establish about the world\u2019s cyber and digital systems and its couplings?<\/dd><dt>Sources searched<\/dt><dd>agency flagships; regulator and national statistical reports; peer-reviewed studies; legal texts<\/dd><dt>Window<\/dt><dd>releases available at evidence close, 30 September 2026<\/dd><dt>Selection<\/dt><dd>sources that bind or contextualise a finding in this edition<\/dd><dt>Next step<\/dt><dd>systematic reviews for agenda items 01 to 05 in 2027<\/dd><\/dl><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.5<\/span><span class=\"nrp-tbl-t\">Peer-reviewed science and assessments<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Type<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>Neprash et al.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n23\" id=\"nx-nrp-gs-13-c6-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td>journal article<\/td><td>2022<\/td><td>supports<\/td><td>health ransomware trends<\/td><\/tr><tr><td>Fang et al.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n24\" id=\"nx-nrp-gs-13-c6-r24\" aria-label=\"Note 24\">24<\/a><\/sup><\/td><td>preprint<\/td><td>2024<\/td><td>context<\/td><td>exploit of one-day flaws<\/td><\/tr><tr><td>Dameff et al.<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n45\" id=\"nx-nrp-gs-13-c6-r45\" aria-label=\"Note 45\">45<\/a><\/sup><\/td><td>journal article<\/td><td>2024<\/td><td>context<\/td><td>care effects of ransomware<\/td><\/tr><tr><td>NIST post-quantum project<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n17\" aria-label=\"Note 17\">17<\/a><\/sup><\/td><td>project record<\/td><td>2025<\/td><td>context<\/td><td>standardisation status<\/td><\/tr><tr><td>NIST Cybersecurity Framework 2.0<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n15\" aria-label=\"Note 15\">15<\/a><\/sup><\/td><td>framework<\/td><td>2024<\/td><td>context<\/td><td>governance function<\/td><\/tr><tr><td>IMF Global Financial Stability Report ch. 3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n35\" id=\"nx-nrp-gs-13-c6-r35\" aria-label=\"Note 35\">35<\/a><\/sup><\/td><td>assessment<\/td><td>2024<\/td><td>context<\/td><td>financial-sector cyber risk<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.6<\/span><span class=\"nrp-tbl-t\">Institutional flagships<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n48\" id=\"nx-nrp-gs-13-c6-r48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><td>ITU<\/td><td>2025<\/td><td>supports<\/td><td>connectivity<\/td><\/tr><tr><td>Facts and Figures 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n1\" id=\"nx-nrp-gs-13-c6-r1\" aria-label=\"Note 1\">1<\/a><\/sup><\/td><td>ITU<\/td><td>2026<\/td><td>post-close, context only<\/td><td>connectivity<\/td><\/tr><tr><td>Global Cybersecurity Index 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n4\" id=\"nx-nrp-gs-13-c6-r4\" aria-label=\"Note 4\">4<\/a><\/sup><\/td><td>ITU<\/td><td>2024<\/td><td>supports<\/td><td>national capacity<\/td><\/tr><tr><td>Submarine cable resilience article<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n12\" id=\"nx-nrp-gs-13-c6-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><td>ITU and ICPC<\/td><td>2026<\/td><td>supports<\/td><td>cable faults<\/td><\/tr><tr><td>Inflection Point report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n11\" id=\"nx-nrp-gs-13-c6-r11\" aria-label=\"Note 11\">11<\/a><\/sup><\/td><td>UNODC<\/td><td>2025<\/td><td>context<\/td><td>scam centres<\/td><\/tr><tr><td>Digital Progress and Trends Report 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n30\" id=\"nx-nrp-gs-13-c6-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/td><td>World Bank<\/td><td>2025<\/td><td>context<\/td><td>compute and concentration<\/td><\/tr><tr><td>Global Digital Compact<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n31\" id=\"nx-nrp-gs-13-c6-r31\" aria-label=\"Note 31\">31<\/a><\/sup><\/td><td>UN General Assembly<\/td><td>2024<\/td><td>context<\/td><td>connectivity commitments<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.7<\/span><span class=\"nrp-tbl-t\">Statistics, crime and markets<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>Annual Report 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><td>FBI IC3<\/td><td>2026<\/td><td>supports<\/td><td>victim-reported losses<\/td><\/tr><tr><td>Threat Landscape 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n3\" id=\"nx-nrp-gs-13-c6-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>ENISA<\/td><td>2025<\/td><td>supports<\/td><td>intrusion vectors<\/td><\/tr><tr><td>Global Cybersecurity Outlook 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n5\" id=\"nx-nrp-gs-13-c6-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/td><td>WEF<\/td><td>2026<\/td><td>context<\/td><td>executive survey<\/td><\/tr><tr><td>Workforce Study 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n6\" id=\"nx-nrp-gs-13-c6-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><td>ISC2<\/td><td>2025<\/td><td>context<\/td><td>skills and resources<\/td><\/tr><tr><td>Ransomware analysis 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><td>Chainalysis<\/td><td>2026<\/td><td>supports<\/td><td>on-chain payments<\/td><\/tr><tr><td>Cyber Security Breaches Survey 2025\/26<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n28\" id=\"nx-nrp-gs-13-c6-r28\" aria-label=\"Note 28\">28<\/a><\/sup><\/td><td>UK Government<\/td><td>2026<\/td><td>supports<\/td><td>business prevalence<\/td><\/tr><tr><td>Crypto Crime Report 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n33\" id=\"nx-nrp-gs-13-c6-r33\" aria-label=\"Note 33\">33<\/a><\/sup><\/td><td>Chainalysis<\/td><td>2026<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n32\" id=\"nx-nrp-gs-13-c6-r32\" aria-label=\"Note 32\">32<\/a><\/sup><\/td><td>Verizon<\/td><td>2026<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td>Cost of a Data Breach 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n38\" id=\"nx-nrp-gs-13-c6-r38\" aria-label=\"Note 38\">38<\/a><\/sup><\/td><td>IBM<\/td><td>2025<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td>Annual Review 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n36\" id=\"nx-nrp-gs-13-c6-r36\" aria-label=\"Note 36\">36<\/a><\/sup><\/td><td>UK NCSC<\/td><td>2025<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td>Threat Assessment 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n37\" id=\"nx-nrp-gs-13-c6-r37\" aria-label=\"Note 37\">37<\/a><\/sup><\/td><td>Europol<\/td><td>2025<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td>Digital Defense Report 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n39\" id=\"nx-nrp-gs-13-c6-r39\" aria-label=\"Note 39\">39<\/a><\/sup><\/td><td>Microsoft<\/td><td>2025<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><tr><td>DDoS threat report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n47\" id=\"nx-nrp-gs-13-c6-r47\" aria-label=\"Note 47\">47<\/a><\/sup><\/td><td>Cloudflare<\/td><td>2025<\/td><td>context<\/td><td>not used for a figure<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c6-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 6.8<\/span><span class=\"nrp-tbl-t\">Law, standards and infrastructure<\/span><\/caption><thead><tr><th scope=\"col\">Reference<\/th><th scope=\"col\">Issuer<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">Role<\/th><th scope=\"col\">Used for<\/th><\/tr><\/thead><tbody><tr><td>NIS2 Directive<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td>European Union<\/td><td>2022<\/td><td>supports<\/td><td>incident reporting duties<\/td><\/tr><tr><td>Cyber Resilience Act<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td>European Union<\/td><td>2024<\/td><td>supports<\/td><td>product duties<\/td><\/tr><tr><td>Digital Operational Resilience Act<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><td>European Union<\/td><td>2022<\/td><td>supports<\/td><td>financial entities<\/td><\/tr><tr><td>AI Act<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><td>European Union<\/td><td>2024<\/td><td>context<\/td><td>AI duties<\/td><\/tr><tr><td>UN Convention against Cybercrime<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>UNODC<\/td><td>2025<\/td><td>supports<\/td><td>treaty status<\/td><\/tr><tr><td>Budapest Convention<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n40\" id=\"nx-nrp-gs-13-c6-r40\" aria-label=\"Note 40\">40<\/a><\/sup><\/td><td>Council of Europe<\/td><td>2001<\/td><td>context<\/td><td>earlier treaty<\/td><\/tr><tr><td>Joint advisories<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n25\" id=\"nx-nrp-gs-13-c6-r25\" aria-label=\"Note 25\">25<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n26\" id=\"nx-nrp-gs-13-c6-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td>national agencies<\/td><td>2024 to 2025<\/td><td>supports<\/td><td>state-sponsored activity<\/td><\/tr><tr><td>Catalogue of known exploited vulnerabilities<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n7\" id=\"nx-nrp-gs-13-c6-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><td>CISA<\/td><td>2026<\/td><td>supports<\/td><td>exploited flaws<\/td><\/tr><tr><td>National Vulnerability Database<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n8\" id=\"nx-nrp-gs-13-c6-r8\" aria-label=\"Note 8\">8<\/a><\/sup><\/td><td>NIST<\/td><td>2026<\/td><td>supports<\/td><td>published records<\/td><\/tr><tr><td>Root cause analysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n14\" id=\"nx-nrp-gs-13-c6-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><td>CrowdStrike<\/td><td>2024<\/td><td>supports<\/td><td>update failure<\/td><\/tr><tr><td>Internet Society brief<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n13\" id=\"nx-nrp-gs-13-c6-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><td>Internet Society<\/td><td>2025<\/td><td>supports<\/td><td>cable resilience<\/td><\/tr><tr><td>Mapping of submarine cables<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n44\" id=\"nx-nrp-gs-13-c6-r44\" aria-label=\"Note 44\">44<\/a><\/sup><\/td><td>TeleGeography<\/td><td>2025<\/td><td>context<\/td><td>cable count<\/td><\/tr><tr><td>Incident disclosure rule<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n46\" id=\"nx-nrp-gs-13-c6-r46\" aria-label=\"Note 46\">46<\/a><\/sup><\/td><td>US SEC<\/td><td>2023<\/td><td>context<\/td><td>disclosure duty<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Where the evidence agrees<\/h3><ul class=\"nrp-list\"><li><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Phishing<\/a> and exploitation of known flaws open most intrusions<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/li><li>Concentration of providers and routes raises <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 systemic-risk\" data-tk=\"Nexus risk vocabulary\" data-td=\"Risk that the failure or disruption of parts of an interconnected system propagates through its dependencies to impair the functioning of the whole, often beyond the sector or place where it began. It arises from\u2026\" data-ts=\"NRS-C1\" data-tr=\"draft\" data-tg=\"https:\/\/globalriskforum.com\/glossary\/systemic-risk\/\" data-tgl=\"Global Risks Forum glossary\" data-ta=\"https:\/\/risksacademy.com\/courses\/cross-stream-practicum\/\" data-tal=\"Cross-Stream Practicum\">systemic risk<\/a><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n14\" aria-label=\"Note 14\">14<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n30\" aria-label=\"Note 30\">30<\/a><\/sup><\/li><li>Connectivity gaps between income groups remain large<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Where it is unsettled<\/h3><ul class=\"nrp-list\"><li>How much cybercrime costs worldwide, on one basis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n33\" aria-label=\"Note 33\">33<\/a><\/sup><\/li><li>Whether ransomware is growing: claimed attacks and payments move in opposite directions<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n29\" aria-label=\"Note 29\">29<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/li><li>How large the AI effect on intrusions is, measured rather than surveyed<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n3\" aria-label=\"Note 3\">3<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n5\" aria-label=\"Note 5\">5<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c6-n24\" aria-label=\"Note 24\">24<\/a><\/sup><\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NEWS AND PREPRINTS<\/p><p>No news report or preprint binds a finding in this edition. News is used only to date events; preprints used from 2027 will be flagged as not peer-reviewed.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c6-notes\" aria-labelledby=\"nx-nrp-gs-13-c6-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c6-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c6-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Regulation (EU) 2024\/1689 laying down harmonised rules on artificial intelligence (AI Act), Official Journal of the European Union, 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n15\"><span class=\"nrp-notes-n\">15<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r15\" aria-label=\"Back to the first call of note 15\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n16\"><span class=\"nrp-notes-n\">16<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (13 August 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r16\" aria-label=\"Back to the first call of note 16\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n42\"><span class=\"nrp-notes-n\">42<\/span><span>UNVERIFIED, not opened: IEC (ed.), IEC 62443 series, Security for industrial automation and control <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, cited from memory. International Electrotechnical Commission, Geneva. Observation year 2018. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r42\" aria-label=\"Back to the first call of note 42\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n41\"><span class=\"nrp-notes-n\">41<\/span><span>UNVERIFIED, not opened: ISO and IEC (eds.), ISO\/IEC 27001:2022, Information security management systems: requirements, cited from memory. International Organization for Standardization, Geneva. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r41\" aria-label=\"Back to the first call of note 41\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n10\"><span class=\"nrp-notes-n\">10<\/span><span>United Nations General Assembly (ed.), Resolution 80\/16 on the final report of the open-ended working group on security of and in the use of information and communications technologies (endorses A\/80\/257; Global Mechanism from 2026). United Nations, New York, December 2025. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n17\"><span class=\"nrp-notes-n\">17<\/span><span>NIST (ed.), Post-Quantum Cryptography standardisation project page (FIPS 203, 204 and 205 published 13 August 2024; HQC selected 11 March 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r17\" aria-label=\"Back to the first call of note 17\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n18\"><span class=\"nrp-notes-n\">18<\/span><span>Moody, D. et al., Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (November 2024; proposes deprecation after 2030 and disallowance after 2035 for quantum-vulnerable algorithms; a draft). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r18\" aria-label=\"Back to the first call of note 18\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r24\" aria-label=\"Back to the first call of note 24\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n45\"><span class=\"nrp-notes-n\">45<\/span><span>UNVERIFIED, not opened: TeleGeography (ed.), Submarine Cable Map (570 cables in 2025 with 81 planned, as quoted in the Internet Society brief [13]); the source was not opened. TeleGeography, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r45\" aria-label=\"Back to the first call of note 45\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n35\"><span class=\"nrp-notes-n\">35<\/span><span>UNVERIFIED, not opened: International Monetary Fund (ed.), Global Financial Stability Report, April 2024, chapter 3 on cyber risk and financial stability; the page returned an access error and no figure is used. IMF, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r35\" aria-label=\"Back to the first call of note 35\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n1\"><span class=\"nrp-notes-n\">1<\/span><span>POST-CLOSE, context only: Post-close, context only: ITU (ed.), Measuring digital development: Facts and Figures 2026 (released 3 November 2026, after the 30 September 2026 evidence close; supports no baseline claim). International Telecommunication Union, Geneva. Observation year 2026 (estimates, with 2025 comparison). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n11\"><span class=\"nrp-notes-n\">11<\/span><span>UNODC (ed.), Inflection Point: Global Implications of Scam Centres, Underground Banking and Illicit Online Marketplaces in Southeast Asia (April 2025). United Nations Office on Drugs and Crime, Bangkok. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n31\"><span class=\"nrp-notes-n\">31<\/span><span>United Nations General Assembly (ed.), Global Digital Compact, A\/79\/L.2 (September 2024). United Nations, New York. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r31\" aria-label=\"Back to the first call of note 31\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n6\"><span class=\"nrp-notes-n\">6<\/span><span>ISC2 (ed.), 2025 ISC2 Cybersecurity Workforce Study (December 2025; 16,029 respondents; states that it includes no estimate of the workforce gap). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n28\"><span class=\"nrp-notes-n\">28<\/span><span>UK Department for Science, Innovation and Technology and partners (eds.), Cyber Security Breaches Survey 2025\/2026 (30 April 2026; survey of businesses and charities). UK Government, London. Observation year 2026 (survey covering the preceding 12 months). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r28\" aria-label=\"Back to the first call of note 28\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n33\"><span class=\"nrp-notes-n\">33<\/span><span>UNVERIFIED, not opened: Chainalysis (ed.), 2026 Crypto Crime Report (illicit receipts of about USD 154 billion in 2025 in search summaries); the page returned an error. Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r33\" aria-label=\"Back to the first call of note 33\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (third-party involvement in 48% of breaches and exploitation as 31% of initial access in search summaries; the page opened held no figures). Verizon, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r32\" aria-label=\"Back to the first call of note 32\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: IBM (ed.), Cost of a Data Breach Report 2025; gated and no figure is used. IBM, Armonk. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r38\" aria-label=\"Back to the first call of note 38\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n36\"><span class=\"nrp-notes-n\">36<\/span><span>UNVERIFIED, not opened: UK National Cyber Security Centre (ed.), Annual Review 2025; the page address returned not found and no figure is used. NCSC, London. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r36\" aria-label=\"Back to the first call of note 36\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n37\"><span class=\"nrp-notes-n\">37<\/span><span>UNVERIFIED, not opened: Europol (ed.), Internet Organised Crime Threat Assessment 2025: Steal, deal and repeat; the file returned not found and no figure is used. Europol, The Hague. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r37\" aria-label=\"Back to the first call of note 37\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n39\"><span class=\"nrp-notes-n\">39<\/span><span>UNVERIFIED, not opened: Microsoft (ed.), Microsoft Digital Defense Report 2025; access denied and no figure is used. Microsoft, Redmond. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r39\" aria-label=\"Back to the first call of note 39\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n47\"><span class=\"nrp-notes-n\">47<\/span><span>UNVERIFIED, not opened: US Securities and Exchange Commission (ed.), Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, final rule, 2023, cited from memory and no figure is used. SEC, Washington. Observation year 2023. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r47\" aria-label=\"Back to the first call of note 47\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n40\"><span class=\"nrp-notes-n\">40<\/span><span>UNVERIFIED, not opened: Council of Europe, Convention on Cybercrime (Budapest Convention), CETS No. 185, 2001, cited from memory; the site blocked access and no figure is used. Council of Europe, Strasbourg. Observation year 2001. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r40\" aria-label=\"Back to the first call of note 40\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n25\"><span class=\"nrp-notes-n\">25<\/span><span>CISA, FBI, NSA and partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, joint cybersecurity advisory (27 August 2025). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), National Vulnerability Database, CVE API version 2.0 (records published in 2024 and in 2025, excluding rejected records, counted by the editors from four quarterly queries per year; 39,953 and 48,150). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r8\" aria-label=\"Back to the first call of note 8\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n44\"><span class=\"nrp-notes-n\">44<\/span><span>ITU (ed.), Measuring digital development: Facts and Figures 2025 (released 17 November 2025; pages on Internet use, mobile network coverage, Internet use in urban and rural areas and ICT skills opened, with the press release; 2025 aggregates are ITU estimates). International Telecommunication Union, Geneva. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r44\" aria-label=\"Back to the first call of note 44\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c6-n46\"><span class=\"nrp-notes-n\">46<\/span><span>UNVERIFIED, not opened: Dameff, C. et al., Ransomware Attacks, ED Visits and Inpatient Admissions in Targeted and Nearby Hospitals, JAMA, 2024, pages 2129 to 2131; listed in a literature index and the text was not read. American Medical Association, Chicago. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c6-r46\" aria-label=\"Back to the first call of note 46\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-agenda\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c7-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 7<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">The 2027 agenda<\/h2><p class=\"nrp-lede\">Eight bounded questions open the 2027 cyber and digital systems agenda. Each comes from a baseline finding, names the initiative that will carry it and the first output due in the 2027 cyber and digital systems edition.<\/p><p class=\"nrp-chap-meta\"><span>5 min read<\/span><span>0 figures<\/span><span>6 tables<\/span><span>4 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s1\" aria-labelledby=\"nx-nrp-gs-13-c7-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s1-h\"><span class=\"nrp-num\">7.1<\/span><span>Questions for the operational series<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">C-01<\/span><p class=\"nrp-rows-t\">How would a failure at a concentrated digital provider that coincides with a ransomware wave travel through health, power and public services at once?<\/p><p class=\"nrp-rows-m\">INI-GS13-CPF-01 \u00b7 provider failure under ransomware; first output: concurrency analysis for six regions.<\/p><\/li><li><span class=\"nrp-rows-i\">C-02<\/span><p class=\"nrp-rows-t\">Which operational technology and control <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> in utilities have incident data on a common basis?<\/p><p class=\"nrp-rows-m\">INI-GS13-OTI-02 \u00b7 utility incident data; first output: reporting-channel register.<\/p><\/li><li><span class=\"nrp-rows-i\">C-03<\/span><p class=\"nrp-rows-t\">How do ransomware attacks on health services change care outcomes beyond the 2016 to 2021 study period?<\/p><p class=\"nrp-rows-m\">INI-GS13-HRW-03 \u00b7 health ransomware and care; first output: data scoping note.<\/p><\/li><li><span class=\"nrp-rows-i\">C-04<\/span><p class=\"nrp-rows-t\">Which submarine routes and landing points are single points of failure, and where is repair capacity short?<\/p><p class=\"nrp-rows-m\">INI-GS13-CBL-04 \u00b7 cable routes and repair; first output: route dependence map.<\/p><\/li><li><span class=\"nrp-rows-i\">C-05<\/span><p class=\"nrp-rows-t\">Where do connectivity gaps coincide with weak cyber capacity, and what would closing them take?<\/p><p class=\"nrp-rows-m\">INI-GS13-GAP-05 \u00b7 connectivity and capacity; first output: tier-and-access table.<\/p><\/li><li><span class=\"nrp-rows-i\">C-06<\/span><p class=\"nrp-rows-t\">How are EU reporting duties for incidents and exploited vulnerabilities being used in practice?<\/p><p class=\"nrp-rows-m\">To be admitted in 2027; first output: duty-to-data overlay.<\/p><\/li><li><span class=\"nrp-rows-i\">C-07<\/span><p class=\"nrp-rows-t\">What is the measured, not surveyed, effect of AI on intrusion speed and volume?<\/p><p class=\"nrp-rows-m\">To be admitted in 2027; first output: scoping note.<\/p><\/li><li><span class=\"nrp-rows-i\">C-08<\/span><p class=\"nrp-rows-t\">Which cyber capabilities have been tested in real incidents, and which are only planned?<\/p><p class=\"nrp-rows-m\">Cyber capability register; first output: rung evidence for 15 functions.<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s2\" aria-labelledby=\"nx-nrp-gs-13-c7-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s2-h\"><span class=\"nrp-num\">7.2<\/span><span>Portfolio proposed for the Q1 2027 alignment<\/span><\/h2><p class=\"nrp-stand\">Five initiatives and one Universe mission candidate are proposed for the 2027 cyber and digital portfolio. They are programme objects: no partner, funder or member is attached to them in this edition.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.1<\/span><span class=\"nrp-tbl-t\">Objects proposed for the first operational quarter<\/span><\/caption><thead><tr><th scope=\"col\">ID<\/th><th scope=\"col\">Object<\/th><th scope=\"col\">Kind<\/th><th scope=\"col\">Question<\/th><th scope=\"col\">State<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-mono\">INI-GS13-CPF-01<\/span><\/td><td>Provider failure under ransomware<\/td><td>Initiative<\/td><td>C-01<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-GS13-OTI-02<\/span><\/td><td>Utility incident data<\/td><td>Initiative<\/td><td>C-02<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-GS13-HRW-03<\/span><\/td><td>Health ransomware and care<\/td><td>Initiative<\/td><td>C-03<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-GS13-CBL-04<\/span><\/td><td>Cable routes and repair<\/td><td>Initiative<\/td><td>C-04<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">INI-GS13-GAP-05<\/span><\/td><td>Connectivity and capacity<\/td><td>Initiative<\/td><td>C-05<\/td><td>PROPOSED<\/td><\/tr><tr><td><span class=\"nrp-mono\">MSN-GS13-2027-01<\/span><\/td><td>Provider failure under ransomware Universe mission<\/td><td>Mission<\/td><td>C-01<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Candidate<\/span><\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s3\" aria-labelledby=\"nx-nrp-gs-13-c7-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s3-h\"><span class=\"nrp-num\">7.3<\/span><span>The pathway<\/span><\/h2><p class=\"nrp-stand\">The cyber and digital edition reads national cyber and digital chapters, regional connectivity and incident evidence and the global edition through one governed evidence graph. At baseline the federation is designed; the Canada and global chapters are drafted. This page states what exists today and what comes next.<\/p><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-t\">National cyber and digital chapters<\/p><p class=\"nrp-rows-x\">digital and cyber content of each national edition<\/p><p class=\"nrp-rows-m\">DRAFTED \u00b7 further national baselines<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-t\">Route and incident evidence<\/p><p class=\"nrp-rows-x\">shared cables, exchange points and reporting channels<\/p><p class=\"nrp-rows-m\">PLANNED \u00b7 regional Baseline Editions<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-t\">Cyber and digital sector model<\/p><p class=\"nrp-rows-x\">the digital layer under the system of <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a><\/p><p class=\"nrp-rows-m\">v0 SPECIFIED \u00b7 v1 with federation evidence<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-t\">Global and strategic links<\/p><p class=\"nrp-rows-x\">GLB \u00b7 SR-02 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a> and Lifeline Systems \u00b7 SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/p><p class=\"nrp-rows-m\">PLANNED \u00b7 strategic baselines<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-t\">Universe<\/p><p class=\"nrp-rows-x\">annual proving environment<\/p><p class=\"nrp-rows-m\">CANDIDATE MISSION \u00b7 mandate in 2027<\/p><\/li><li><span class=\"nrp-rows-i\">06<\/span><p class=\"nrp-rows-t\">Global Cyber and Digital Systems Report<\/p><p class=\"nrp-rows-x\">this series<\/p><p class=\"nrp-rows-m\">BASELINE DRAFT \u00b7 2027 annual edition<\/p><\/li><li><span class=\"nrp-rows-i\">07<\/span><p class=\"nrp-rows-t\">Evidence and correction<\/p><p class=\"nrp-rows-x\">one graph, many projections<\/p><p class=\"nrp-rows-m\">OPEN \u00b7 first correction cycle in 2027<\/p><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s4\" aria-labelledby=\"nx-nrp-gs-13-c7-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s4-h\"><span class=\"nrp-num\">7.4<\/span><span>Universe 2027: evidence pack for the cyber and digital systems candidate mission<\/span><\/h2><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-x\">Mandate<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-x\">Core Build \u00b7 1 month<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-x\">Action \u00b7 1 week<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-x\">Evidence seal<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-x\">Portfolio correction<\/p><\/li><li><span class=\"nrp-rows-i\">06<\/span><p class=\"nrp-rows-x\">Next mandate<\/p><\/li><\/ol><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.2<\/span><span class=\"nrp-tbl-t\">Universe 2027: evidence pack for the cyber and digital systems candidate mission<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Record<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Timing<\/th><\/tr><\/thead><tbody><tr><td>F1<\/td><td>Annual mandate record<\/td><td>PLANNED<\/td><td>after the Q2 2027 alignment<\/td><\/tr><tr><td>F2<\/td><td>Core Build record<\/td><td>PLANNED<\/td><td>one month before the exercise<\/td><\/tr><tr><td>F3<\/td><td>Exercise evidence<\/td><td>PLANNED<\/td><td>during the Action week<\/td><\/tr><tr><td>F4<\/td><td>Decision packets<\/td><td>PLANNED<\/td><td>exercise state only<\/td><\/tr><tr><td>F5<\/td><td>Proof receipts<\/td><td>PLANNED<\/td><td>scoped to each recorded check<\/td><\/tr><tr><td>F6<\/td><td>After-action report<\/td><td>PLANNED<\/td><td>within one quarter<\/td><\/tr><tr><td>F7<\/td><td>Upgrade docket<\/td><td>PLANNED<\/td><td>routed to the Portfolio<\/td><\/tr><tr><td>F8<\/td><td>Portfolio renewal<\/td><td>PLANNED<\/td><td>2027 global annual edition<\/td><\/tr><tr><td>F9<\/td><td>Public synthesis<\/td><td>PLANNED<\/td><td>public-safe extracts only<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Mission<\/h3><dl class=\"nrp-dl\"><dt>ID<\/dt><dd>MSN-GS13-2027-01 \u00b7 Provider failure under ransomware Universe mission<\/dd><dt>Role spine<\/dt><dd>Leadership sponsor \u00b7 Institutional anchor \u00b7 Mission lead: drawn from national pathways<\/dd><dt>Receiving actors<\/dt><dd>to be identified with the mandate<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Simulation success is not deployment approval; demonstration is not certification; finance readiness is not financing secured.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s5\" aria-labelledby=\"nx-nrp-gs-13-c7-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s5-h\"><span class=\"nrp-num\">7.5<\/span><span>Handoffs and routing<\/span><\/h2><p class=\"nrp-stand\">Where the baseline\u2019s findings go next. A handoff routes a finding for awareness, review or work; it transfers no authority.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.3<\/span><span class=\"nrp-tbl-t\">Handoffs and routing<\/span><\/caption><thead><tr><th scope=\"col\">Finding<\/th><th scope=\"col\">Routed to<\/th><th scope=\"col\">Purpose<\/th><th scope=\"col\">Class<\/th><\/tr><\/thead><tbody><tr><td>INF-001 \u00b7 connectivity<\/td><td>public record<\/td><td>reference for the 2027 series<\/td><td>PUBLIC<\/td><\/tr><tr><td>DAT-002 \u00b7 crime reports<\/td><td>INI-GS13-GAP-05<\/td><td>connectivity and capacity<\/td><td>PUBLIC<\/td><\/tr><tr><td>INF-005 \u00b7 exploited flaws<\/td><td>INI-GS13-OTI-02<\/td><td>utility incident data<\/td><td>PUBLIC<\/td><\/tr><tr><td>HLT-009 \u00b7 health ransomware<\/td><td>INI-GS13-HRW-03<\/td><td>health ransomware and care<\/td><td>PUBLIC<\/td><\/tr><tr><td>GOV-006 \u00b7 capacity index<\/td><td>public record<\/td><td>country tier overlay<\/td><td>PUBLIC<\/td><\/tr><tr><td>INF-008 \u00b7 cable faults<\/td><td>INI-GS13-CBL-04<\/td><td>cable routes and repair<\/td><td>PUBLIC<\/td><\/tr><tr><td>INF-011 \u00b7 update failure<\/td><td>INI-GS13-CPF-01 \u00b7 key F review<\/td><td>provider failure under ransomware<\/td><td>PUBLIC<\/td><\/tr><tr><td>SYS-012 \u00b7 compound pathway<\/td><td>MSN-GS13-2027-01<\/td><td>Universe candidate<\/td><td>CONSORTIUM<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.4<\/span><span class=\"nrp-tbl-t\">Routing rules by publication class<\/span><\/caption><thead><tr><th scope=\"col\">Class<\/th><th scope=\"col\">Where it goes<\/th><th scope=\"col\">Who can see it<\/th><\/tr><\/thead><tbody><tr><td>PUBLIC<\/td><td>the published edition and its evidence bundle<\/td><td>anyone<\/td><\/tr><tr><td>CONSORTIUM<\/td><td>governed rooms of the federation<\/td><td>consortium members under agreement<\/td><\/tr><tr><td>CONTROLLED<\/td><td>need-to-know channels<\/td><td>named competent actors only<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">CODES ARE NOT JOINS<\/p><p>Series codes in this edition (GS-13 and its relatives) are Reports codes. Codes in other indices can look alike. This edition makes no join on a code alone: a join needs a registry record that names both subjects.<\/p><\/aside><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Handoffs carry findings to Nexus programme objects and steward reviews. States and organisations receive public editions as published; nothing here instructs them.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-s6\" aria-labelledby=\"nx-nrp-gs-13-c7-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-s6-h\"><span class=\"nrp-num\">7.6<\/span><span>Feeds and signal register<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.5<\/span><span class=\"nrp-tbl-t\">Feeds watched from 2027<\/span><\/caption><thead><tr><th scope=\"col\">Feed<\/th><th scope=\"col\">Producer<\/th><th scope=\"col\">Latency<\/th><th scope=\"col\">Feeds into<\/th><\/tr><\/thead><tbody><tr><td>Catalogue of known exploited vulnerabilities<\/td><td>CISA<\/td><td>continuous<\/td><td>INF-005<\/td><\/tr><tr><td>National Vulnerability Database<\/td><td>NIST<\/td><td>continuous<\/td><td>INF-005<\/td><\/tr><tr><td>Measuring digital development data<\/td><td>ITU<\/td><td>annual<\/td><td>INF-001<\/td><\/tr><tr><td>Internet Crime Complaint Center reports<\/td><td>FBI<\/td><td>annual<\/td><td>DAT-002<\/td><\/tr><tr><td>Threat Landscape<\/td><td>ENISA<\/td><td>annual<\/td><td>DAT-004<\/td><\/tr><tr><td>Treaty status page<\/td><td>UNODC<\/td><td>continuous<\/td><td>GOV-007<\/td><\/tr><tr><td>Internet shutdowns data<\/td><td>Access Now<\/td><td>annual<\/td><td>INF-001<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Escalation routes<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">none \u00b7 keep monitoring<\/li><li class=\"nf-ui-chip\">research question<\/li><li class=\"nf-ui-chip\">project<\/li><li class=\"nf-ui-chip\">risk object<\/li><li class=\"nf-ui-chip\">annual publication<\/li><li class=\"nf-ui-chip\">signal report<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c7-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 7.6<\/span><span class=\"nrp-tbl-t\">Signals at baseline<\/span><\/caption><thead><tr><th scope=\"col\">ID<\/th><th scope=\"col\">Signal<\/th><th scope=\"col\">Corroboration<\/th><th scope=\"col\">Systems<\/th><th scope=\"col\">Route<\/th><\/tr><\/thead><tbody><tr><td>SIG-GS13-001<\/td><td>Entries added to the exploited vulnerabilities catalogue in 2026 exceed those added in 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c7-n7\" id=\"nx-nrp-gs-13-c7-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><td>CORROBORATED<\/td><td>INF \u00b7 DAT<\/td><td>research question C-02<\/td><\/tr><tr><td>SIG-GS13-002<\/td><td>Claimed ransomware attacks rose while on-chain payments fell<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c7-n29\" id=\"nx-nrp-gs-13-c7-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><td>PARTIAL<\/td><td>FIN \u00b7 DAT<\/td><td>initiative C-03<\/td><\/tr><tr><td>SIG-GS13-003<\/td><td>Submarine cable faults persist at about 200 a year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c7-n12\" id=\"nx-nrp-gs-13-c7-r12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c7-n13\" id=\"nx-nrp-gs-13-c7-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><td>CORROBORATED<\/td><td>INF \u00b7 TRD<\/td><td>initiative C-04<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>A signal is not a warning. Signal records never substitute for official alerting or early-warning authorities, and they bypass no publication control.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c7-notes\" aria-labelledby=\"nx-nrp-gs-13-c7-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c7-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c7-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c7-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c7-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c7-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c7-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c7-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c7-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c7-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-systems-in-depth\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-c8-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Chapter 8<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Systems in depth<\/h2><p class=\"nrp-lede\">One section per system: its state at evidence close, its exposures and what the operational series will watch.<\/p><p class=\"nrp-chap-meta\"><span>7 min read<\/span><span>0 figures<\/span><span>5 tables<\/span><span>13 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-s1\" aria-labelledby=\"nx-nrp-gs-13-c8-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-s1-h\"><span class=\"nrp-num\">8.1<\/span><span>Digital systems and water<\/span><\/h2><p class=\"nrp-stand\">Treatment, pumping and distribution run on control <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> and telemetry. Cyber risk reaches water services through operational technology, and the evidence on incidents is thin.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">4<\/span><span class=\"nrp-cell-u\">sectors<\/span><p>named as primary compromise targets in a joint advisory, including water and wastewater<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n26\" id=\"nx-nrp-gs-13-c8-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">2<\/span><span class=\"nrp-cell-u\">sectors<\/span><p>drinking water and waste water listed in the EU cyber directive<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" id=\"nx-nrp-gs-13-c8-r19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">0<\/span><span class=\"nrp-cell-u\">series<\/span><p>consolidated incident series found for water utilities<\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c8-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.1<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Advisory evidence<\/td><td>US and allied agencies confirm compromise of IT environments in communications, energy, transport and water sectors<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Legal coverage<\/td><td>drinking water and waste water are sectors under the EU directive with reporting duties<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Incident data<\/td><td>no common-basis series for utility incidents<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" id=\"nx-nrp-gs-13-c8-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><tr><td>Control system practice<\/td><td>standards exist; adoption not consolidated<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n42\" id=\"nx-nrp-gs-13-c8-r42\" aria-label=\"Note 42\">42<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>ENE \u2192 WAT power for control systems<\/li><li>WAT \u2192 ENE shared control networks<\/li><li>WAT \u2192 HLT treatment and clinic supply<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>incident data at water utilities<\/li><li>time to recover control systems<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Reporting under the EU directive; further joint advisories; any common reporting template for utilities.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-02 Energy<\/li><li class=\"nf-ui-chip\">GS-04 Health and One Health<\/li><li class=\"nf-ui-chip\">GS-05 Finance and Economy<\/li><li class=\"nf-ui-chip\">SR-02 Critical Infrastructure and Lifeline Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes digital couplings. It assesses no utility, operator or government.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-s2\" aria-labelledby=\"nx-nrp-gs-13-c8-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-s2-h\"><span class=\"nrp-num\">8.2<\/span><span>Digital systems and energy<\/span><\/h2><p class=\"nrp-stand\">Grids and fuel <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> run on digital control. A joint advisory reports pre-positioning on networks of energy providers, and the EU treats energy as a sector under its cyber law.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">1<\/span><span class=\"nrp-cell-u\">advisory<\/span><p>assesses pre-positioning for disruption in a crisis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n26\" aria-label=\"Note 26\">26<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">24<\/span><span class=\"nrp-cell-u\">hours<\/span><p><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 early-warning\" data-tk=\"Nexus risk vocabulary\" data-td=\"Timely, actionable information about an impending hazard that lets people and institutions act to reduce harm before it occurs.\" data-ts=\"NRS-C1\" data-tr=\"draft\">early warning<\/a> deadline under the EU directive<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">72<\/span><span class=\"nrp-cell-u\">hours<\/span><p>incident notification deadline under the EU directive<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c8-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.2<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Pre-positioning<\/td><td>agencies assess with high confidence that actors are positioned to move from IT to OT networks<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Reporting duty<\/td><td>early warning within 24 hours and notification within 72 hours of a significant incident<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Operational data<\/td><td>no consolidated series of operational incidents<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><tr><td>Product duties<\/td><td>the Cyber Resilience Act applies to products from 11 December 2027<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n20\" id=\"nx-nrp-gs-13-c8-r20\" aria-label=\"Note 20\">20<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>INF \u2192 ENE control and billing systems<\/li><li>ENE \u2192 INF power for networks<\/li><li>ENE \u2192 HLT power for hospital systems<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>operational incident counts<\/li><li><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 recovery-time\" data-tk=\"Nexus risk vocabulary\" data-td=\"The time needed to restore a function or service to an acceptable level after disruption.\" data-ts=\"NRS-C1\" data-tr=\"draft\">recovery time<\/a> for control systems<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Early reports under the EU directive; joint advisories on energy-sector activity; first Cyber Resilience Act notifications.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-02 Energy<\/li><li class=\"nf-ui-chip\">GS-04 Health and One Health<\/li><li class=\"nf-ui-chip\">GS-05 Finance and Economy<\/li><li class=\"nf-ui-chip\">SR-02 Critical Infrastructure and Lifeline Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes digital couplings. It assesses no operator or government and makes no forecast of attacks.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-s3\" aria-labelledby=\"nx-nrp-gs-13-c8-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-s3-h\"><span class=\"nrp-num\">8.3<\/span><span>Digital systems and food<\/span><\/h2><p class=\"nrp-stand\">Food <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> depend on software for cold chains, traceability, payments and logistics. No consolidated series of digital incidents in food systems was found.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">\u224860<\/span><span class=\"nrp-cell-u\">%<\/span><p>of intrusions opened by <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a> in EU data, all sectors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">21.3<\/span><span class=\"nrp-cell-u\">%<\/span><p>of intrusions opened by exploitation of vulnerabilities, all sectors<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">0<\/span><span class=\"nrp-cell-u\">series<\/span><p>incident series found for food systems<\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c8-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.3<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Cold chain and logistics<\/td><td>depend on power and software; no series<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><tr><td>Traceability<\/td><td>depends on shared data systems; not consolidated<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><tr><td>Payments<\/td><td>fraud and ransomware affect payments, as shown in finance data<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n2\" id=\"nx-nrp-gs-13-c8-r2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><\/tr><tr><td>Logistics targeting<\/td><td>maritime and logistics are a high-value sector in EU data<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>ENE \u2192 FOO cold chain and logistics<\/li><li>INF \u2192 FOO traceability systems<\/li><li>DAT \u2192 FIN \u2192 FOO payments<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>incident series for food sector software<\/li><li>cold-chain outage records<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Ransomware claims against logistics and food processors; cable and port disruption affecting trade data.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-02 Energy<\/li><li class=\"nf-ui-chip\">GS-04 Health and One Health<\/li><li class=\"nf-ui-chip\">GS-05 Finance and Economy<\/li><li class=\"nf-ui-chip\">SR-02 Critical Infrastructure and Lifeline Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes digital couplings. It makes no statement on any country\u2019s agricultural policy.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-s4\" aria-labelledby=\"nx-nrp-gs-13-c8-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-s4-h\"><span class=\"nrp-num\">8.4<\/span><span>Digital systems and health<\/span><\/h2><p class=\"nrp-stand\">Health services depend on records, devices and connectivity. Ransomware attacks on providers disrupt care and expose patient data, and the best evidence is from the United States.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">374<\/span><span class=\"nrp-cell-u\">attacks<\/span><p>on US providers, 2016 to 2021<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n23\" id=\"nx-nrp-gs-13-c8-r23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">42<\/span><span class=\"nrp-cell-u\">million<\/span><p>patients exposed, nearly, 2016 to 2021<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">44.4<\/span><span class=\"nrp-cell-u\">%<\/span><p>of attacks disrupted care delivery<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c8-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.4<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Frequency<\/td><td>annual ransomware attacks rose from 43 to 91, 2016 to 2021<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Care disruption<\/td><td>electronic system downtime in 41.7% and cancelled care in 10.2%<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n23\" aria-label=\"Note 23\">23<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Scale of breach<\/td><td>a 2024 claims processor breach count was seen only in search summaries<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n34\" id=\"nx-nrp-gs-13-c8-r34\" aria-label=\"Note 34\">34<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><tr><td>Legal coverage<\/td><td>healthcare providers are in the sectors covered by the EU directive<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n19\" aria-label=\"Note 19\">19<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>ENE \u2192 HLT hospital power<\/li><li>INF \u2192 HLT records and devices<\/li><li>DAT \u2192 HLT patient data<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>health ransomware data after 2021<\/li><li>non-US evidence on care effects<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Follow-up studies of care effects; reporting under the EU directive; changes in claimed attacks on health.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-02 Energy<\/li><li class=\"nf-ui-chip\">GS-04 Health and One Health<\/li><li class=\"nf-ui-chip\">GS-05 Finance and Economy<\/li><li class=\"nf-ui-chip\">SR-02 Critical Infrastructure and Lifeline Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Health-system planning rests with national authorities and WHO. No personal health data are used or shown in Reports.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-s5\" aria-labelledby=\"nx-nrp-gs-13-c8-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-s5-h\"><span class=\"nrp-num\">8.5<\/span><span>Digital systems, nature and extremes<\/span><\/h2><p class=\"nrp-stand\">Monitoring networks support nature and weather services, and concentration in providers and routes turns single faults into wide events. Evidence is strongest for the update failure and cable faults, and absent for nature.<\/p><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">21<\/span><span class=\"nrp-cell-u\">inputs<\/span><p>expected by the validator against 20 supplied to the interpreter in the 2024 update<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n14\" id=\"nx-nrp-gs-13-c8-r14\" aria-label=\"Note 14\">14<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">\u2248200<\/span><span class=\"nrp-cell-u\">faults<\/span><p>submarine cable faults a year<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n12\" id=\"nx-nrp-gs-13-c8-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">313<\/span><span class=\"nrp-cell-u\">shutdowns<\/span><p>recorded in 52 countries, 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n27\" id=\"nx-nrp-gs-13-c8-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/p><\/div><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-c8-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table 8.5<\/span><span class=\"nrp-tbl-t\">State at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Component<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Evidence<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>Update failure<\/td><td>mismatch of 21 and 20 inputs caused an out-of-bounds read and crashes<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n14\" aria-label=\"Note 14\">14<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Cable faults<\/td><td>about 200 a year; causes reported differently by two issuers<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n13\" id=\"nx-nrp-gs-13-c8-r13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Shutdowns<\/td><td>record number of deliberate shutdowns in 2025<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><\/tr><tr><td>Nature monitoring<\/td><td>no consolidated cyber evidence for monitoring networks<\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-c8-n30\" id=\"nx-nrp-gs-13-c8-r30\" aria-label=\"Note 30\">30<\/a><\/sup><\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Couplings<\/h3><ul class=\"nrp-list\"><li>INF \u2192 ALL provider failure<\/li><li>INF \u2192 TRD route disruption<\/li><li>DAT \u2192 BIO monitoring data<\/li><\/ul><\/div><div><h3 class=\"nrp-h3\">Evidence to bind in 2027<\/h3><ul class=\"nrp-list\"><li>evidence on monitoring networks for nature<\/li><li>repair vessel availability<\/li><\/ul><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">WHAT TO WATCH<\/p><p>Roll-out incidents at large providers; cable repair times; shutdown counts during conflict and elections.<\/p><\/aside><h3 class=\"nrp-h3\">Related editions<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">GLB Global Systems<\/li><li class=\"nf-ui-chip\">GS-02 Energy<\/li><li class=\"nf-ui-chip\">GS-04 Health and One Health<\/li><li class=\"nf-ui-chip\">GS-05 Finance and Economy<\/li><li class=\"nf-ui-chip\">SR-02 Critical Infrastructure and Lifeline Systems<\/li><li class=\"nf-ui-chip\">SR-10 Digital Public Infrastructure and Systemic Cyber Risk<\/li><\/ul><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>This chapter describes digital and physical couplings. It assesses no vendor, operator or state and attributes no fault.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-c8-notes\" aria-labelledby=\"nx-nrp-gs-13-c8-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-c8-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-c8-n26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n42\"><span class=\"nrp-notes-n\">42<\/span><span>UNVERIFIED, not opened: IEC (ed.), IEC 62443 series, Security for industrial automation and control <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, cited from memory. International Electrotechnical Commission, Geneva. Observation year 2018. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r42\" aria-label=\"Back to the first call of note 42\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r23\" aria-label=\"Back to the first call of note 23\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n34\"><span class=\"nrp-notes-n\">34<\/span><span>UNVERIFIED, not opened: US Department of Health and Human Services Office for Civil Rights, breach portal entry for the Change Healthcare breach (192.7 million individuals in search summaries); the portal opened without the record. HHS OCR, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r34\" aria-label=\"Back to the first call of note 34\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r14\" aria-label=\"Back to the first call of note 14\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n27\"><span class=\"nrp-notes-n\">27<\/span><span>Access Now and the #KeepItOn coalition (eds.), Rising Repression Meets Global Resistance: Internet Shutdowns in 2025 (annual report, March 2026). Access Now, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-c8-n30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-c8-r30\" aria-label=\"Back to the first call of note 30\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-methodology\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-ca-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex A<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Methodology<\/h2><p class=\"nrp-lede\">How the edition was made: methods, the model card, the evidence cut and its age, the acceptance record and the glossary.<\/p><p class=\"nrp-chap-meta\"><span>14 min read<\/span><span>0 figures<\/span><span>13 tables<\/span><span>21 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s1\" aria-labelledby=\"nx-nrp-gs-13-ca-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s1-h\"><span class=\"nrp-num\">A.1<\/span><span>Methods<\/span><\/h2><p class=\"nrp-stand\">The global baseline uses published values and four simple derivations. Each is shown in full so that any reader can reproduce it.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.1<\/span><span class=\"nrp-tbl-t\">Methods<\/span><\/caption><thead><tr><th scope=\"col\">No.<\/th><th scope=\"col\">Derivation<\/th><th scope=\"col\">Calculation<\/th><th scope=\"col\">Result<\/th><\/tr><\/thead><tbody><tr><td>(1)<\/td><td>Share of catalogue entries flagged for ransomware use, 3 November 2026<\/td><td>361 \u00f7 1,767<\/td><td>\u224820.4%<\/td><\/tr><tr><td>(2)<\/td><td>Growth in NVD records published, 2025 against 2024, excluding rejected records (sum of four quarterly counts each year)<\/td><td>48,150 \u00f7 39,953<\/td><td>\u224820.5% more<\/td><\/tr><tr><td>(3)<\/td><td>FBI reported ransomware losses against on-chain ransomware payments, 2025<\/td><td>USD 820 million \u00f7 USD 32.3 million<\/td><td>\u224825 times, a scope difference, not an error<\/td><\/tr><tr><td>(4)<\/td><td>Countries without a national incident response team, 2024<\/td><td>194 \u2212 139<\/td><td>55<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab2\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.2<\/span><span class=\"nrp-tbl-t\">Coupling strength scale (matrix and model card)<\/span><\/caption><thead><tr><th scope=\"col\">Strength<\/th><th scope=\"col\">Definition<\/th><\/tr><\/thead><tbody><tr><td>STRONG<\/td><td>a disruption in the source system has historically changed the target system\u2019s service or output within one season, in more than one region<\/td><\/tr><tr><td>MODERATE<\/td><td>an effect is documented but buffered or slower<\/td><\/tr><tr><td>WEAK<\/td><td>an effect is plausible but not documented at global scale<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.3<\/span><span class=\"nrp-tbl-t\">Status grammar<\/span><\/caption><thead><tr><th scope=\"col\">Label<\/th><th scope=\"col\">Rule<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td>value as issued by its source, with year<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><td>reasoned from cited evidence; never a measurement<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Estimated<\/span><\/td><td>Nexus analytical value with stated method<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Scenario<\/span><\/td><td>conditional on stated assumptions<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><td>structured editorial judgement awaiting evidence<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s2\" aria-labelledby=\"nx-nrp-gs-13-ca-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s2-h\"><span class=\"nrp-num\">A.2<\/span><span>Model card, Cyber and Digital Sector Model v0<\/span><\/h2><dl class=\"nrp-dl\"><dt>Model ID<\/dt><dd>MDL-GS13-CYBER \u00b7 v0.1<\/dd><dt>Purpose<\/dt><dd>represent the global digital layer and its couplings to water, energy, food, health and nature<\/dd><dt>Family<\/dt><dd>graph-based system of <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a><\/dd><dt>Inputs<\/dt><dd>the cited sources of this edition; no proprietary data<\/dd><dt>Method<\/dt><dd>expert-specified coupling strengths (STRONG \u00b7 MODERATE \u00b7 WEAK) from assessments and analogue events<\/dd><dt>Validation<\/dt><dd>none yet, first validation against federation evidence in 2027<\/dd><dt>Uncertainty<\/dt><dd>qualitative; strengths are hypotheses, not measurements<\/dd><dt>Domain of validity<\/dt><dd>global scale; not for asset-, site- or country-level use<\/dd><dt>Reproducibility<\/dt><dd>strength table and sources published in this edition<\/dd><\/dl><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">20<\/span><span class=\"nrp-cell-u\">couplings<\/span><p>typed in v0<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">2<\/span><span class=\"nrp-cell-u\">strong<\/span><p>documented within one season<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">4<\/span><span class=\"nrp-cell-u\">moderate<\/span><p>documented, buffered<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">14<\/span><span class=\"nrp-cell-u\">weak<\/span><p>plausible, undocumented<\/p><\/div><\/div><div class=\"nrp-split\"><div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">SUITABLE FOR<\/p><p>framing the 2027 agenda; choosing which couplings to measure first; explaining the coupled reading of cyber risk and public services.<\/p><\/aside><\/div><div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NOT SUITABLE FOR<\/p><p>quantitative loss estimates, country comparisons or rankings, operational decisions, or any claim about a specific asset.<\/p><\/aside><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">VERSIONING<\/p><p>Models are immutable by version. A change to any coupling, rule or weight produces v0.2 with its own card and correction note.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s3\" aria-labelledby=\"nx-nrp-gs-13-ca-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s3-h\"><span class=\"nrp-num\">A.3<\/span><span>The baseline evidence cut<\/span><\/h2><p class=\"nrp-stand\">Every Nexus edition is published from a frozen evidence cut. The global baseline cut is documentary: it pins the exact edition of every source cited. Federation cuts begin with the first national Foundry cuts in 2027.<\/p><dl class=\"nrp-dl\"><dt>Cut ID<\/dt><dd>DC-SECTOR-CYBER-GLOBAL-2026-B0<\/dd><dt>Type<\/dt><dd>baseline documentary cut<\/dd><dt>Resolution policy<\/dt><dd>pinned \u00b7 as of 30 September 2026<\/dd><dt>Sources pinned<\/dt><dd>48 cited sources, each at the edition and access date in the references<\/dd><dt>Model runs<\/dt><dd>none at baseline, analytical values are stated with their method<\/dd><dt>Digest<\/dt><dd>computed at <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h5\" data-tc=\"NHS-1 atmo.thermal.hard-freeze\" data-tk=\"Atmosphere and weather \u00b7 Thermal extremes\" data-td=\"Air temperature falling well below freezing for hours, killing crops, bursting pipes and stopping water flow.\" data-ts=\"NRS-H5\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/atmo\/\" data-txl=\"Atmosphere and weather\">freeze<\/a> and recorded in the publication record<\/dd><dt>Supersedes<\/dt><dd>nothing, first cut of the series<\/dd><dt>Superseded by<\/dt><dd>the 2027 cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> annual cut<\/dd><\/dl><h3 class=\"nrp-h3\">Lineage<\/h3><ol class=\"nrp-rows\"><li><span class=\"nrp-rows-i\">01<\/span><p class=\"nrp-rows-x\">source edition<\/p><\/li><li><span class=\"nrp-rows-i\">02<\/span><p class=\"nrp-rows-x\">pinned citation<\/p><\/li><li><span class=\"nrp-rows-i\">03<\/span><p class=\"nrp-rows-x\">finding<\/p><\/li><li><span class=\"nrp-rows-i\">04<\/span><p class=\"nrp-rows-x\">page<\/p><\/li><li><span class=\"nrp-rows-i\">05<\/span><p class=\"nrp-rows-x\">publication record<\/p><\/li><\/ol><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.4<\/span><span class=\"nrp-tbl-t\">From the baseline cut to the federation cut<\/span><\/caption><thead><tr><th scope=\"col\">Element<\/th><th scope=\"col\">Baseline 2026<\/th><th scope=\"col\">2027 global annual<\/th><\/tr><\/thead><tbody><tr><td>Sources<\/td><td>cited global publications, pinned by edition<\/td><td>national, regional and sector cuts through one graph<\/td><\/tr><tr><td>Analysis<\/td><td>stated methods and editorial estimates<\/td><td>typed analysis specifications<\/td><\/tr><tr><td>Models<\/td><td>Cyber and Digital Sector Model v0 specification<\/td><td>model runs with receipts<\/td><\/tr><tr><td>Findings<\/td><td>twelve baseline findings<\/td><td>findings re-bound to federation evidence<\/td><\/tr><tr><td>Review<\/td><td>five passes scheduled<\/td><td>five passes on the exact digest<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s4\" aria-labelledby=\"nx-nrp-gs-13-ca-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s4-h\"><span class=\"nrp-num\">A.4<\/span><span>Evidence age and coverage<\/span><\/h2><p class=\"nrp-stand\">A 2026 global edition rests on evidence observed in many different years. This page shows each time base, so that no single year label hides older evidence.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.5<\/span><span class=\"nrp-tbl-t\">Evidence age and coverage<\/span><\/caption><thead><tr><th scope=\"col\">Indicator<\/th><th scope=\"col\">Observed<\/th><th scope=\"col\">Released<\/th><th scope=\"col\">Cadence<\/th><th scope=\"col\">Next release<\/th><\/tr><\/thead><tbody><tr><td>Internet use and coverage<\/td><td>2025<\/td><td>November 2025<\/td><td>annual<\/td><td>next Facts and Figures<\/td><\/tr><tr><td>Victim-reported cybercrime<\/td><td>2025<\/td><td>2026<\/td><td>annual<\/td><td>next IC3 report<\/td><\/tr><tr><td>Intrusion vectors in the EU<\/td><td>July 2024 to June 2025<\/td><td>October 2025<\/td><td>annual<\/td><td>next Threat Landscape<\/td><\/tr><tr><td>Known exploited vulnerabilities<\/td><td>2021 to 2026<\/td><td>3 November 2026<\/td><td>continuous<\/td><td>continuous<\/td><\/tr><tr><td>National cybersecurity capacity<\/td><td>2024<\/td><td>2024<\/td><td>periodic<\/td><td>next index<\/td><\/tr><tr><td>Treaty signatures and parties<\/td><td>2026<\/td><td>3 November 2026<\/td><td>continuous<\/td><td>continuous<\/td><\/tr><tr><td>Submarine cable faults<\/td><td>about 200 a year<\/td><td>February 2026<\/td><td>one-off<\/td><td>follow-up reports<\/td><\/tr><tr><td>Internet shutdowns<\/td><td>2025<\/td><td>March 2026<\/td><td>annual<\/td><td>next KeepItOn report<\/td><\/tr><tr><td>Ransomware payments<\/td><td>2025<\/td><td>February 2026<\/td><td>annual<\/td><td>next analysis<\/td><\/tr><tr><td>Health ransomware trends<\/td><td>2016 to 2021<\/td><td>2022<\/td><td>one-off<\/td><td>follow-up studies<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.6<\/span><span class=\"nrp-tbl-t\">Coverage by system at baseline<\/span><\/caption><thead><tr><th scope=\"col\">System<\/th><th scope=\"col\">Coverage<\/th><th scope=\"col\">Thinnest dimension<\/th><\/tr><\/thead><tbody><tr><td>Connectivity<\/td><td>GOOD<\/td><td>quality and affordability by country<\/td><\/tr><tr><td>Crime and fraud<\/td><td>PARTIAL<\/td><td>losses outside the United States<\/td><\/tr><tr><td>Threat landscape<\/td><td>PARTIAL<\/td><td>regions beyond the EU and US<\/td><\/tr><tr><td>Vulnerabilities<\/td><td>GOOD<\/td><td>time to patch, by vendor<\/td><\/tr><tr><td>Governance<\/td><td>GOOD<\/td><td>treaty status after access<\/td><\/tr><tr><td>Critical services<\/td><td>THIN<\/td><td>utility incident data on a common basis<\/td><\/tr><tr><td>Health<\/td><td>PARTIAL<\/td><td>data after 2021<\/td><\/tr><tr><td>Resilience<\/td><td>PARTIAL<\/td><td>tested capabilities beyond recovery from one update failure<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.7<\/span><span class=\"nrp-tbl-t\">Designed empty states: what is not bound, what would fill it and why<\/span><\/caption><thead><tr><th scope=\"col\">Field<\/th><th scope=\"col\">Source that would fill it<\/th><th scope=\"col\">Blocker<\/th><\/tr><\/thead><tbody><tr><td>Global cybercrime losses on one basis<\/td><td>national police and crime agencies; UNODC<\/td><td>the FBI series covers United States victims only and no common global series was found; a commercial figure for illicit crypto receipts<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n33\" id=\"nx-nrp-gs-13-ca-r33\" aria-label=\"Note 33\">33<\/a><\/sup> was seen only in search summaries and is not used<\/td><\/tr><tr><td>Ransomware: reconciliation of claimed attacks, payments and reported losses<\/td><td>Chainalysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n29\" id=\"nx-nrp-gs-13-ca-r29\" aria-label=\"Note 29\">29<\/a><\/sup>; FBI IC3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n2\" id=\"nx-nrp-gs-13-ca-r2\" aria-label=\"Note 2\">2<\/a><\/sup>; national reporting channels<\/td><td>the series use different bases and are not reconciled in this edition<\/td><\/tr><tr><td>Third-party involvement and exploitation shares in breaches, 2026<\/td><td>Verizon <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n32\" id=\"nx-nrp-gs-13-ca-r32\" aria-label=\"Note 32\">32<\/a><\/sup><\/td><td>the report body was not accessible; only search summaries were read and no figure is used<\/td><\/tr><tr><td>Final count of people affected by the 2024 health claims processor breach<\/td><td>US Department of Health and Human Services breach portal; company notice<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n34\" id=\"nx-nrp-gs-13-ca-r34\" aria-label=\"Note 34\">34<\/a><\/sup><\/td><td>portal and notice not accessible as text; a count seen in search summaries is not used<\/td><\/tr><tr><td>Cyber incidents at utilities, by sector and region<\/td><td>operators, regulators and national authorities<\/td><td>incident data are not published on a common basis; only advisories on compromise were opened<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n26\" id=\"nx-nrp-gs-13-ca-r26\" aria-label=\"Note 26\">26<\/a><\/sup><\/td><\/tr><tr><td>Time between vulnerability disclosure and exploitation, by vendor<\/td><td>CISA catalogue<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n7\" id=\"nx-nrp-gs-13-ca-r7\" aria-label=\"Note 7\">7<\/a><\/sup>; ENISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n3\" id=\"nx-nrp-gs-13-ca-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>the catalogue holds dates added, not dates of first exploitation; only ENISA\u2019s statement of exploitation within days is cited<\/td><\/tr><tr><td>Cybersecurity workforce shortfall<\/td><td>ISC2 Cybersecurity Workforce Study<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n6\" id=\"nx-nrp-gs-13-ca-r6\" aria-label=\"Note 6\">6<\/a><\/sup><\/td><td>the 2025 study states that it includes no estimate of the workforce gap<\/td><\/tr><tr><td>Share of Internet users with digital safety skills<\/td><td>ITU Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n48\" id=\"nx-nrp-gs-13-ca-r48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><td>only 88 countries have submitted ICT skills data since 2020, rarely for all skill areas; no global share is published<\/td><\/tr><tr><td>Financial stability losses from cyber incidents<\/td><td>IMF Global Financial Stability Report, April 2024, chapter 3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n35\" id=\"nx-nrp-gs-13-ca-r35\" aria-label=\"Note 35\">35<\/a><\/sup><\/td><td>the page was not accessible; no figure is used<\/td><\/tr><tr><td>Operation of the UN Global Mechanism after 2026, from the final report text<\/td><td>working group final report A\/80\/257<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n43\" id=\"nx-nrp-gs-13-ca-r43\" aria-label=\"Note 43\">43<\/a><\/sup><\/td><td>the report text was not opened; only the General Assembly resolution that endorses it was read<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n10\" id=\"nx-nrp-gs-13-ca-r10\" aria-label=\"Note 10\">10<\/a><\/sup><\/td><\/tr><tr><td>Treaty ratifications after the access date<\/td><td>UN Treaty Collection; UNODC<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n9\" id=\"nx-nrp-gs-13-ca-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>status changes continuously; the page was read on 3 November 2026 only<\/td><\/tr><tr><td>Application dates of EU acts after any later amendment<\/td><td>Official Journal consolidated versions<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n19\" id=\"nx-nrp-gs-13-ca-r19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n20\" id=\"nx-nrp-gs-13-ca-r20\" aria-label=\"Note 20\">20<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n21\" id=\"nx-nrp-gs-13-ca-r21\" aria-label=\"Note 21\">21<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n22\" id=\"nx-nrp-gs-13-ca-r22\" aria-label=\"Note 22\">22<\/a><\/sup><\/td><td>the texts as first published were opened; later amendments were not checked<\/td><\/tr><tr><td>Capability rungs beyond recovery from one update failure and asset freezes<\/td><td>operators, regulators, ministries<\/td><td>not reviewed<\/td><\/tr><tr><td>Cost of a data breach, by sector and region<\/td><td>IBM Cost of a Data Breach Report 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n38\" id=\"nx-nrp-gs-13-ca-r38\" aria-label=\"Note 38\">38<\/a><\/sup><\/td><td>report is gated; not opened and no figure used<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s5\" aria-labelledby=\"nx-nrp-gs-13-ca-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s5-h\"><span class=\"nrp-num\">A.5<\/span><span>Evidence cards, two anchor sources<\/span><\/h2><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Issued by the European Union Agency for Cybersecurity (October 2025) from 4,875 incidents curated from open sources and member state reports. Annual. Role: binds DAT-004 and the intrusion vector figure.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EVD-GS13-001<\/h3><p>ENISA Threat Landscape 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Compiled by the ITU from official national statistics and ITU estimates (November 2025). Annual. Role: binds INF-001 and the connectivity tiles.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EVD-GS13-002<\/h3><p>ITU Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">Released 3 November 2026, after the evidence close. Annual. Role: context only. It binds no baseline claim and no figure in this edition.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">EVD-GS13-003<\/h3><p>ITU Facts and Figures 2026<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n1\" id=\"nx-nrp-gs-13-ca-r1\" aria-label=\"Note 1\">1<\/a><\/sup> (post-close, context only)<\/p><\/article><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.8<\/span><span class=\"nrp-tbl-t\">Quality dimensions at baseline<\/span><\/caption><thead><tr><th scope=\"col\">Dimension<\/th><th scope=\"col\">EVD-GS13-001<\/th><th scope=\"col\">EVD-GS13-002<\/th><\/tr><\/thead><tbody><tr><td>Completeness<\/td><td>open sources and shared reports; not a census<\/td><td>2025 aggregates are ITU estimates computed with the published method<\/td><\/tr><tr><td>Timeliness<\/td><td>about 4 months after the period ends<\/td><td>weeks after the end of the year<\/td><\/tr><tr><td>Revision<\/td><td>annual edition<\/td><td>annual edition with revised back series<\/td><\/tr><tr><td>Method transparency<\/td><td>methodology published<\/td><td>indicator definitions published<\/td><\/tr><tr><td>External validation<\/td><td>reviewed by national liaison and response teams<\/td><td>member state review<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Evidence cards to follow in 2027<\/h3><ul class=\"nrp-list\"><li>FBI IC3<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n2\" aria-label=\"Note 2\">2<\/a><\/sup>: complaints by state and sector tables<\/li><li>ENISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n3\" aria-label=\"Note 3\">3<\/a><\/sup>: incident dataset by sector<\/li><li>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n4\" id=\"nx-nrp-gs-13-ca-r4\" aria-label=\"Note 4\">4<\/a><\/sup>: country tier table<\/li><li>CISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n7\" aria-label=\"Note 7\">7<\/a><\/sup>: dates of first exploitation, if published<\/li><\/ul><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s6\" aria-labelledby=\"nx-nrp-gs-13-ca-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s6-h\"><span class=\"nrp-num\">A.6<\/span><span>Publication acceptance record<\/span><\/h2><p class=\"nrp-stand\">Editorial self-check at evidence close. Every applicable item carries a disposition; the remaining items are review, approval and deposit.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab9\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.9<\/span><span class=\"nrp-tbl-t\">Publication acceptance record<\/span><\/caption><thead><tr><th scope=\"col\">Group<\/th><th scope=\"col\">Area<\/th><th scope=\"col\">Items<\/th><th scope=\"col\">Pass<\/th><th scope=\"col\">N\/A<\/th><th scope=\"col\">Pending<\/th><\/tr><\/thead><tbody><tr><td>D1<\/td><td>Identity and scope<\/td><td>8<\/td><td>8<\/td><td>0<\/td><td>0<\/td><\/tr><tr><td>D2<\/td><td>Source and data<\/td><td>12<\/td><td>9<\/td><td>1<\/td><td>2<\/td><\/tr><tr><td>D3<\/td><td>Analysis and models<\/td><td>12<\/td><td>3<\/td><td>8<\/td><td>1<\/td><\/tr><tr><td>D4<\/td><td>Findings and claims<\/td><td>9<\/td><td>8<\/td><td>0<\/td><td>1<\/td><\/tr><tr><td>D5<\/td><td>Figures, tables, maps<\/td><td>10<\/td><td>6<\/td><td>2<\/td><td>2<\/td><\/tr><tr><td>D6<\/td><td>Editorial and citations<\/td><td>10<\/td><td>8<\/td><td>0<\/td><td>2<\/td><\/tr><tr><td>D7<\/td><td>Review and approval<\/td><td>13<\/td><td>0<\/td><td>0<\/td><td>13<\/td><\/tr><tr><td>D8<\/td><td>Artefact and design<\/td><td>12<\/td><td>7<\/td><td>0<\/td><td>5<\/td><\/tr><tr><td>D9<\/td><td>Registry and release<\/td><td>9<\/td><td>0<\/td><td>0<\/td><td>9<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Publication gate<\/h3><dl class=\"nrp-dl\"><dt>Conditions met<\/dt><dd>14 of 23 at evidence close<\/dd><dt>Blocking problems<\/dt><dd>none recorded<\/dd><dt>Open conditions<\/dt><dd>reviews, approval of the exact digest, deposit, registry pointer<\/dd><\/dl><\/div><div><h3 class=\"nrp-h3\">Not applicable at baseline<\/h3><dl class=\"nrp-dl\"><dt>Model runs<\/dt><dd>first runs in Q1 2027<\/dd><dt>Maps<\/dt><dd>plates in Q2 2027<\/dd><dt>Waivers<\/dt><dd>none<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Dispositions are recorded item by item in the machine-readable checklist. A FAIL on any item blocks release.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s7\" aria-labelledby=\"nx-nrp-gs-13-ca-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s7-h\"><span class=\"nrp-num\">A.7<\/span><span>Status words<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab10\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.10<\/span><span class=\"nrp-tbl-t\">The status every value carries<\/span><\/caption><thead><tr><th scope=\"col\">Status<\/th><th scope=\"col\">What it means<\/th><\/tr><\/thead><tbody><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"positive\" aria-hidden=\"true\"><\/span>Observed<\/span><\/td><td>Measured directly and published by the source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td>Published statistics of an official or institutional source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Declared<\/span><\/td><td>Stated by the body concerned; not independently measured.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Estimated<\/span><\/td><td>A Nexus estimate from cited evidence, with its method in Annex A.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Modelled<\/span><\/td><td>Produced by a stated model from cited inputs.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Inferred<\/span><\/td><td>Reasoned from cited evidence; not measured.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Forecast<\/span><\/td><td>A projection by the cited source.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Simulated<\/span><\/td><td>A simulation result under stated assumptions.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Scenario<\/span><\/td><td>A conditional statement under stated assumptions; never a prediction.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"neutral\" aria-hidden=\"true\"><\/span>Expert input<\/span><\/td><td>Expert judgement, recorded with its basis.<\/td><\/tr><tr><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"caution\" aria-hidden=\"true\"><\/span>Candidate<\/span><\/td><td>Proposed for a later edition; not yet evidence.<\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"2\">Evidence-quality levels (EQL 1 to 5) grade the source behind a value; they are not a score of the subject.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s8\" aria-labelledby=\"nx-nrp-gs-13-ca-s8-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s8-h\"><span class=\"nrp-num\">A.8<\/span><span>How the edition is made, released and corrected<\/span><\/h2><p class=\"nx-p\">Every edition is built from a sealed evidence cut, reviewed under three keys, signed and deposited before any site shows it as published; corrections go to <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a> as change proposals and feed the next cut.<\/p><div class=\"nx-table-wrap\"><table class=\"nx-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Step\">01 Evidence arrives from the pillars<\/td><td data-label=\"What happens\">Foundry seals observations and indicator series, Universe hands over after-action and scenario findings, and contributions are screened at every gateway, including this site&#8217;s.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">02 The cut is sealed<\/td><td data-label=\"What happens\">On the cut date the evidence is pinned under one identifier, so anyone can rebuild the edition from exactly what it was built on.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">03 The edition is assembled<\/td><td data-label=\"What happens\">The edition is drafted from its template and content pack. Agents may draft; they never publish and never decide.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">04 The keys turn<\/td><td data-label=\"What happens\">At the publisher of record the truth key comes first: every value is checked against its source or stated method before the meaning and capital keys turn. No edition moves on until every key has been turned by a named steward.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">05 The gate opens<\/td><td data-label=\"What happens\">A named approver releases one exact digest of the edition; any change after this point is a new version, never a silent edit.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">06 Signed and deposited<\/td><td data-label=\"What happens\">The PDF, the web edition and the data bundle are signed together with a manifest and an RO-Crate description, and deposited on Zenodo with a concept and a version DOI.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">07 Published on its desk&#8217;s site<\/td><td data-label=\"What happens\">Only then does the edition show as published on its desk&#8217;s Reports site, and the Collection lists it as a part.<\/td><td data-label=\"Source\"><\/td><\/tr><tr><td data-label=\"Step\">08 Corrections go to Standards<\/td><td data-label=\"What happens\">Method and correction findings go to Nexus Standards as change proposals; citations, corrections and new contributions feed the next evidence cut.<\/td><td data-label=\"Source\"><\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-note nx-mt-2\">A teaching model of the process, not a forecast and not a record of any run; dates and counts on this page come from the programme record. Sources: <a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/governance\/\" rel=\"noopener\">Reports governance at GCRI Canada<\/a> (2026); Zenodo, repository of record for Reports deposits (2026).<\/p><p class=\"nrp-note\">Lifecycle, one state at a time: Draft, Computed, Evidence bound, Reviewed, Approved for release, Published, Corrected, Superseded. This edition is a draft.<\/p><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s9\" aria-labelledby=\"nx-nrp-gs-13-ca-s9-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s9-h\"><span class=\"nrp-num\">A.9<\/span><span>Glossary and abbreviations<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab11\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.11<\/span><span class=\"nrp-tbl-t\">Series terms<\/span><\/caption><thead><tr><th scope=\"col\">Term<\/th><th scope=\"col\">Meaning<\/th><\/tr><\/thead><tbody><tr><td>Baseline Edition<\/td><td>the inaugural annual edition that fixes the reference state for the series<\/td><\/tr><tr><td>WEFH+B<\/td><td>cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>, energy, food, health and biodiversity, the <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/governance-in-operation\/national-nexus\" data-tc=\"National Nexus\" data-tk=\"Nexus Standards\" data-td=\"The national model: the NNC, the NLC and the NWG as its three participation pillars, with the National Desk, Model and Portfolio and the NSC as the standards function of the NNC (OR-13)\">national nexus<\/a> core<\/td><\/tr><tr><td>Coupling<\/td><td>a typed dependency through which one system transmits to another<\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 protection-gap\" data-tk=\"Nexus risk vocabulary\" data-td=\"The difference between total economic losses from hazards and the share covered by insurance or other pre-arranged protection, leaving households, firms and governments to absorb the rest.\" data-ts=\"NRS-C1\" data-tr=\"draft\" data-tg=\"https:\/\/globalriskalliance.com\/glossary\/protection-gap\/\" data-tgl=\"Global Risks Alliance glossary\">Protection gap<\/a><\/td><td>the share of losses not covered by insurance<\/td><\/tr><tr><td>Capability ladder<\/td><td>LISTED \u2192 EXISTS \u2192 ADEQUATE \u2192 TESTED \u2192 DEMONSTRATED<\/td><\/tr><tr><td>EQL<\/td><td>evidence-quality level, 1\u20135<\/td><\/tr><tr><td>Evidence cut<\/td><td>a frozen resolution of exact sources and versions<\/td><\/tr><tr><td>NNC \u00b7 NLC \u00b7 NWG<\/td><td>National Nexus Consortium \u00b7 National Leadership Council \u00b7 National Working Groups<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab12\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.12<\/span><span class=\"nrp-tbl-t\">Abbreviations used in this edition<\/span><\/caption><thead><tr><th scope=\"col\">Abbreviation<\/th><th scope=\"col\">Expansion<\/th><\/tr><\/thead><tbody><tr><td>CIRT<\/td><td>computer incident response team<\/td><\/tr><tr><td>CISA<\/td><td>US Cybersecurity and Infrastructure Security Agency<\/td><\/tr><tr><td>DORA<\/td><td>Digital Operational Resilience Act<\/td><\/tr><tr><td>ENISA<\/td><td>European Union Agency for Cybersecurity<\/td><\/tr><tr><td>FBI IC3<\/td><td>Federal Bureau of Investigation Internet Crime Complaint Center<\/td><\/tr><tr><td>GCI<\/td><td>Global Cybersecurity Index<\/td><\/tr><tr><td>ITU<\/td><td>International Telecommunication Union<\/td><\/tr><tr><td>KEV<\/td><td>known exploited vulnerabilities<\/td><\/tr><tr><td>NIS2<\/td><td>second Network and Information Security Directive<\/td><\/tr><tr><td>NVD<\/td><td>National Vulnerability Database<\/td><\/tr><tr><td>OT<\/td><td>operational technology<\/td><\/tr><tr><td>WEF<\/td><td>World Economic Forum<\/td><\/tr><\/tbody><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-s10\" aria-labelledby=\"nx-nrp-gs-13-ca-s10-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-s10-h\"><span class=\"nrp-num\">A.10<\/span><span>Technical annex<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-ca-tab13\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table A.13<\/span><span class=\"nrp-tbl-t\">Technical annex<\/span><\/caption><thead><tr><th scope=\"col\">Item<\/th><th scope=\"col\">Annex<\/th><th scope=\"col\">Contents<\/th><th scope=\"col\">Status<\/th><\/tr><\/thead><tbody><tr><td>A.1<\/td><td>Indicator definitions<\/td><td>the global indicator set, with units and sources<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.2<\/td><td>Coupling strengths<\/td><td>the twenty-cell matrix and its rationale<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.3<\/td><td>Scenario specification<\/td><td>SCN-GS13-CPF-01 assumptions and signposts<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.4<\/td><td>Capability placements<\/td><td>rung evidence for fifteen functions<\/td><td>IN THIS EDITION<\/td><\/tr><tr><td>A.5<\/td><td>Model diagnostics<\/td><td>first runs and validation<\/td><td>2027<\/td><\/tr><tr><td>A.6<\/td><td>Sensitivity analyses<\/td><td>influence of coupling strengths<\/td><td>2027<\/td><\/tr><tr><td>A.7<\/td><td>Route and exchange notes<\/td><td>cards for the major shared cable routes and exchange points<\/td><td>WITH REGIONAL EDITIONS<\/td><\/tr><tr><td>A.8<\/td><td>Review statements<\/td><td>pass-by-pass review record<\/td><td>AT RELEASE<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">A.1 \u00b7 indicator definition: national incident response team<\/h3><dl class=\"nrp-dl\"><dt>Construct<\/dt><dd>a national team with responsibility for responding to cyber incidents, as reported by countries<\/dd><dt>Unit<\/dt><dd>count of countries<\/dd><dt>Method<\/dt><dd>country questionnaire compiled by the ITU for the Global Cybersecurity Index<\/dd><dt>Source<\/dt><dd>ITU Global Cybersecurity Index 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-ca-n4\" aria-label=\"Note 4\">4<\/a><\/sup><\/dd><dt>Uncertainty<\/dt><dd>self-reported; verified with country focal points where possible<\/dd><dt>Known limits<\/dt><dd>presence of a team does not measure its capacity, staffing or independence<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Annexes carry the same evidence, review and correction rules as the chapters and are versioned with the edition.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-ca-notes\" aria-labelledby=\"nx-nrp-gs-13-ca-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-ca-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-ca-n33\"><span class=\"nrp-notes-n\">33<\/span><span>UNVERIFIED, not opened: Chainalysis (ed.), 2026 Crypto Crime Report (illicit receipts of about USD 154 billion in 2025 in search summaries); the page returned an error. Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r33\" aria-label=\"Back to the first call of note 33\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (third-party involvement in 48% of breaches and exploitation as 31% of initial access in search summaries; the page opened held no figures). Verizon, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r32\" aria-label=\"Back to the first call of note 32\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n34\"><span class=\"nrp-notes-n\">34<\/span><span>UNVERIFIED, not opened: US Department of Health and Human Services Office for Civil Rights, breach portal entry for the Change Healthcare breach (192.7 million individuals in search summaries); the portal opened without the record. HHS OCR, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r34\" aria-label=\"Back to the first call of note 34\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r26\" aria-label=\"Back to the first call of note 26\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n6\"><span class=\"nrp-notes-n\">6<\/span><span>ISC2 (ed.), 2025 ISC2 Cybersecurity Workforce Study (December 2025; 16,029 respondents; states that it includes no estimate of the workforce gap). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r6\" aria-label=\"Back to the first call of note 6\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n35\"><span class=\"nrp-notes-n\">35<\/span><span>UNVERIFIED, not opened: International Monetary Fund (ed.), Global Financial Stability Report, April 2024, chapter 3 on cyber risk and financial stability; the page returned an access error and no figure is used. IMF, Washington. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r35\" aria-label=\"Back to the first call of note 35\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n43\"><span class=\"nrp-notes-n\">43<\/span><span>UNVERIFIED, not opened: United Nations General Assembly (ed.), Final report of the open-ended working group on security of and in the use of information and communications technologies 2021 to 2025, A\/80\/257; read only through resolution 80\/16 [10]. United Nations, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r43\" aria-label=\"Back to the first call of note 43\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n10\"><span class=\"nrp-notes-n\">10<\/span><span>United Nations General Assembly (ed.), Resolution 80\/16 on the final report of the open-ended working group on security of and in the use of information and communications technologies (endorses A\/80\/257; Global Mechanism from 2026). United Nations, New York, December 2025. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r10\" aria-label=\"Back to the first call of note 10\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n22\"><span class=\"nrp-notes-n\">22<\/span><span>Regulation (EU) 2024\/1689 laying down harmonised rules on artificial intelligence (AI Act), Official Journal of the European Union, 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r22\" aria-label=\"Back to the first call of note 22\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: IBM (ed.), Cost of a Data Breach Report 2025; gated and no figure is used. IBM, Armonk. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r38\" aria-label=\"Back to the first call of note 38\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n1\"><span class=\"nrp-notes-n\">1<\/span><span>POST-CLOSE, context only: Post-close, context only: ITU (ed.), Measuring digital development: Facts and Figures 2026 (released 3 November 2026, after the 30 September 2026 evidence close; supports no baseline claim). International Telecommunication Union, Geneva. Observation year 2026 (estimates, with 2025 comparison). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r1\" aria-label=\"Back to the first call of note 1\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-ca-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-ca-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-data\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-cb-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex B<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">Data appendix<\/h2><p class=\"nrp-lede\">The indicator set with its sources, the source registers, the licences of every kind of material and the formats of the edition.<\/p><p class=\"nrp-chap-meta\"><span>10 min read<\/span><span>0 figures<\/span><span>8 tables<\/span><span>18 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s1\" aria-labelledby=\"nx-nrp-gs-13-cb-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s1-h\"><span class=\"nrp-num\">B.1<\/span><span>The indicator set<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.1<\/span><span class=\"nrp-tbl-t\">Global baseline indicator set<\/span><\/caption><thead><tr><th scope=\"col\">Indicator<\/th><th scope=\"col\">Value<\/th><th scope=\"col\">Unit<\/th><th scope=\"col\">Year<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td>People using the Internet<\/td><td><span class=\"nrp-mono\">74<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" id=\"nx-nrp-gs-13-cb-r48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>People using the Internet<\/td><td><span class=\"nrp-mono\">6<\/span><\/td><td>billion<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Internet use, high-income countries<\/td><td><span class=\"nrp-mono\">94<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Internet use, low-income countries<\/td><td><span class=\"nrp-mono\">23<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Population covered by 5G<\/td><td><span class=\"nrp-mono\">55<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Complaints to the FBI<\/td><td><span class=\"nrp-mono\">1,008,597<\/span><\/td><td>complaints<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" id=\"nx-nrp-gs-13-cb-r2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>Losses reported to the FBI<\/td><td><span class=\"nrp-mono\">20.877<\/span><\/td><td>USD billion<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>Cryptocurrency investment fraud losses, US<\/td><td><span class=\"nrp-mono\">7.2<\/span><\/td><td>USD billion<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>Ransomware complaints to the FBI<\/td><td><span class=\"nrp-mono\">3,611<\/span><\/td><td>complaints<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>On-chain ransomware payments<\/td><td><span class=\"nrp-mono\">820<\/span><\/td><td>USD million<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n29\" id=\"nx-nrp-gs-13-cb-r29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><\/tr><tr><td>Incidents analysed by ENISA<\/td><td><span class=\"nrp-mono\">4,875<\/span><\/td><td>incidents<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n3\" id=\"nx-nrp-gs-13-cb-r3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><\/tr><tr><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Phishing<\/a> share of observed intrusions, EU<\/td><td><span class=\"nrp-mono\">\u224860<\/span><\/td><td>%<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><\/tr><tr><td>Known exploited vulnerabilities in the catalogue<\/td><td><span class=\"nrp-mono\">1,767<\/span><\/td><td>entries<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n7\" id=\"nx-nrp-gs-13-cb-r7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><\/tr><tr><td>Catalogue entries added<\/td><td><span class=\"nrp-mono\">283<\/span><\/td><td>entries<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><\/tr><tr><td>NVD records published, excluding rejected<\/td><td><span class=\"nrp-mono\">48,150<\/span><\/td><td>records<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n8\" id=\"nx-nrp-gs-13-cb-r8\" aria-label=\"Note 8\">8<\/a><\/sup><\/td><\/tr><tr><td>NVD records published, excluding rejected<\/td><td><span class=\"nrp-mono\">39,953<\/span><\/td><td>records<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n8\" aria-label=\"Note 8\">8<\/a><\/sup><\/td><\/tr><tr><td>Countries with a national incident response team<\/td><td><span class=\"nrp-mono\">139<\/span><\/td><td>of 194<\/td><td>2024<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n4\" id=\"nx-nrp-gs-13-cb-r4\" aria-label=\"Note 4\">4<\/a><\/sup><\/td><\/tr><tr><td>UN Convention against Cybercrime signatories<\/td><td><span class=\"nrp-mono\">96<\/span><\/td><td>signatories<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n9\" id=\"nx-nrp-gs-13-cb-r9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><\/tr><tr><td>Submarine cable faults<\/td><td><span class=\"nrp-mono\">\u2248200<\/span><\/td><td>a year<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" id=\"nx-nrp-gs-13-cb-r12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><\/tr><tr><td>Internet shutdowns recorded<\/td><td><span class=\"nrp-mono\">313<\/span><\/td><td>shutdowns<\/td><td>2025<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n27\" id=\"nx-nrp-gs-13-cb-r27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><\/tr><tr><td>UK businesses reporting a breach or attack<\/td><td><span class=\"nrp-mono\">43<\/span><\/td><td>%<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n28\" id=\"nx-nrp-gs-13-cb-r28\" aria-label=\"Note 28\">28<\/a><\/sup><\/td><\/tr><tr><td>Survey respondents naming AI vulnerabilities fastest-growing<\/td><td><span class=\"nrp-mono\">87<\/span><\/td><td>%<\/td><td>2026<\/td><td><span class=\"nrp-st\"><span class=\"nf-ui-dot\" data-tone=\"info\" aria-hidden=\"true\"><\/span>Reported<\/span><\/td><td><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n5\" id=\"nx-nrp-gs-13-cb-r5\" aria-label=\"Note 5\">5<\/a><\/sup><\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-actions nrp-noprint\"><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"data:text\/csv;charset=utf-8,Indicator%2CValue%2CUnit%2CYear%2CState%2CSource%0APeople%20using%20the%20Internet%2C74%2C%25%2C2025%2CREPORTED%2C%5B48%5D%0APeople%20using%20the%20Internet%2C6%2Cbillion%2C2025%2CREPORTED%2C%5B48%5D%0A%22Internet%20use%2C%20high-income%20countries%22%2C94%2C%25%2C2025%2CREPORTED%2C%5B48%5D%0A%22Internet%20use%2C%20low-income%20countries%22%2C23%2C%25%2C2025%2CREPORTED%2C%5B48%5D%0APopulation%20covered%20by%205G%2C55%2C%25%2C2025%2CREPORTED%2C%5B48%5D%0AComplaints%20to%20the%20FBI%2C%221%2C008%2C597%22%2Ccomplaints%2C2025%2CREPORTED%2C%5B2%5D%0ALosses%20reported%20to%20the%20FBI%2C20.877%2CUSD%20billion%2C2025%2CREPORTED%2C%5B2%5D%0A%22Cryptocurrency%20investment%20fraud%20losses%2C%20US%22%2C7.2%2CUSD%20billion%2C2025%2CREPORTED%2C%5B2%5D%0ARansomware%20complaints%20to%20the%20FBI%2C%223%2C611%22%2Ccomplaints%2C2025%2CREPORTED%2C%5B2%5D%0AOn-chain%20ransomware%20payments%2C820%2CUSD%20million%2C2025%2CREPORTED%2C%5B29%5D%0AIncidents%20analysed%20by%20ENISA%2C%224%2C875%22%2Cincidents%2C2025%2CREPORTED%2C%5B3%5D%0A%22Phishing%20share%20of%20observed%20intrusions%2C%20EU%22%2C%E2%89%8860%2C%25%2C2025%2CREPORTED%2C%5B3%5D%0AKnown%20exploited%20vulnerabilities%20in%20the%20catalogue%2C%221%2C767%22%2Centries%2C2026%2CREPORTED%2C%5B7%5D%0ACatalogue%20entries%20added%2C283%2Centries%2C2026%2CREPORTED%2C%5B7%5D%0A%22NVD%20records%20published%2C%20excluding%20rejected%22%2C%2248%2C150%22%2Crecords%2C2025%2CREPORTED%2C%5B8%5D%0A%22NVD%20records%20published%2C%20excluding%20rejected%22%2C%2239%2C953%22%2Crecords%2C2024%2CREPORTED%2C%5B8%5D%0ACountries%20with%20a%20national%20incident%20response%20team%2C139%2Cof%20194%2C2024%2CREPORTED%2C%5B4%5D%0AUN%20Convention%20against%20Cybercrime%20signatories%2C96%2Csignatories%2C2026%2CREPORTED%2C%5B9%5D%0ASubmarine%20cable%20faults%2C%E2%89%88200%2Ca%20year%2C2026%2CREPORTED%2C%5B12%5D%0AInternet%20shutdowns%20recorded%2C313%2Cshutdowns%2C2025%2CREPORTED%2C%5B27%5D%0AUK%20businesses%20reporting%20a%20breach%20or%20attack%2C43%2C%25%2C2026%2CREPORTED%2C%5B28%5D%0ASurvey%20respondents%20naming%20AI%20vulnerabilities%20fastest-growing%2C87%2C%25%2C2026%2CREPORTED%2C%5B5%5D%0A\" download=\"NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-indicators.csv\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12 15V3\"\/><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><path d=\"m7 10 5 5 5-5\"\/><\/svg>Indicators, CSV<\/a><a class=\"nf-ui-btn\" data-variant=\"secondary\" href=\"data:application\/json;charset=utf-8,%7B%0A%20%22edition%22%3A%20%22NR-SECTOR-CYBER-GLOBAL-2026-BASELINE%22%2C%0A%20%22title%22%3A%20%22Nexus%20Global%20Cyber%20and%20digital%20systems%20Risk%20and%20Resilience%20Report%202026%3A%20Baseline%20Edition%2C%20The%20State%20of%20the%20World%E2%80%99s%20Cyber%20and%20Digital%20Systems.%22%2C%0A%20%22status%22%3A%20%22Draft%20under%20stewardship%20review%3B%20not%20yet%20released%22%2C%0A%20%22licence%22%3A%20%22CC-BY-4.0%20for%20the%20edition%20table%3B%20each%20value%20keeps%20its%20source's%20licence%22%2C%0A%20%22columns%22%3A%20%5B%0A%20%20%22Indicator%22%2C%0A%20%20%22Value%22%2C%0A%20%20%22Unit%22%2C%0A%20%20%22Year%22%2C%0A%20%20%22State%22%2C%0A%20%20%22Source%22%0A%20%5D%2C%0A%20%22rows%22%3A%20%5B%0A%20%20%5B%0A%20%20%20%22People%20using%20the%20Internet%22%2C%0A%20%20%20%2274%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B48%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22People%20using%20the%20Internet%22%2C%0A%20%20%20%226%22%2C%0A%20%20%20%22billion%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B48%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Internet%20use%2C%20high-income%20countries%22%2C%0A%20%20%20%2294%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B48%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Internet%20use%2C%20low-income%20countries%22%2C%0A%20%20%20%2223%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B48%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Population%20covered%20by%205G%22%2C%0A%20%20%20%2255%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B48%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Complaints%20to%20the%20FBI%22%2C%0A%20%20%20%221%2C008%2C597%22%2C%0A%20%20%20%22complaints%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B2%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Losses%20reported%20to%20the%20FBI%22%2C%0A%20%20%20%2220.877%22%2C%0A%20%20%20%22USD%20billion%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B2%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Cryptocurrency%20investment%20fraud%20losses%2C%20US%22%2C%0A%20%20%20%227.2%22%2C%0A%20%20%20%22USD%20billion%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B2%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Ransomware%20complaints%20to%20the%20FBI%22%2C%0A%20%20%20%223%2C611%22%2C%0A%20%20%20%22complaints%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B2%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22On-chain%20ransomware%20payments%22%2C%0A%20%20%20%22820%22%2C%0A%20%20%20%22USD%20million%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B29%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Incidents%20analysed%20by%20ENISA%22%2C%0A%20%20%20%224%2C875%22%2C%0A%20%20%20%22incidents%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B3%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Phishing%20share%20of%20observed%20intrusions%2C%20EU%22%2C%0A%20%20%20%22%E2%89%8860%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B3%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Known%20exploited%20vulnerabilities%20in%20the%20catalogue%22%2C%0A%20%20%20%221%2C767%22%2C%0A%20%20%20%22entries%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B7%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Catalogue%20entries%20added%22%2C%0A%20%20%20%22283%22%2C%0A%20%20%20%22entries%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B7%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NVD%20records%20published%2C%20excluding%20rejected%22%2C%0A%20%20%20%2248%2C150%22%2C%0A%20%20%20%22records%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B8%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22NVD%20records%20published%2C%20excluding%20rejected%22%2C%0A%20%20%20%2239%2C953%22%2C%0A%20%20%20%22records%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B8%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Countries%20with%20a%20national%20incident%20response%20team%22%2C%0A%20%20%20%22139%22%2C%0A%20%20%20%22of%20194%22%2C%0A%20%20%20%222024%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B4%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22UN%20Convention%20against%20Cybercrime%20signatories%22%2C%0A%20%20%20%2296%22%2C%0A%20%20%20%22signatories%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B9%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Submarine%20cable%20faults%22%2C%0A%20%20%20%22%E2%89%88200%22%2C%0A%20%20%20%22a%20year%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B12%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Internet%20shutdowns%20recorded%22%2C%0A%20%20%20%22313%22%2C%0A%20%20%20%22shutdowns%22%2C%0A%20%20%20%222025%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B27%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22UK%20businesses%20reporting%20a%20breach%20or%20attack%22%2C%0A%20%20%20%2243%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B28%5D%22%0A%20%20%5D%2C%0A%20%20%5B%0A%20%20%20%22Survey%20respondents%20naming%20AI%20vulnerabilities%20fastest-growing%22%2C%0A%20%20%20%2287%22%2C%0A%20%20%20%22%25%22%2C%0A%20%20%20%222026%22%2C%0A%20%20%20%22REPORTED%22%2C%0A%20%20%20%22%5B5%5D%22%0A%20%20%5D%0A%20%5D%0A%7D\" download=\"NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-indicators.json\"><svg class=\"nrp-i\" viewBox=\"0 0 24 24\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12 15V3\"\/><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><path d=\"m7 10 5 5 5-5\"\/><\/svg>Indicators, JSON<\/a><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NOTES<\/p><p>Shares are rounded as published. Different issuers use different bases for incident counts, losses and payments, and each figure is shown with its issuer where they differ<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n29\" aria-label=\"Note 29\">29<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n13\" id=\"nx-nrp-gs-13-cb-r13\" aria-label=\"Note 13\">13<\/a><\/sup>. Survey values are perceptions and are labelled as such. A machine-readable copy of this table is published with the evidence bundle at release.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s2\" aria-labelledby=\"nx-nrp-gs-13-cb-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s2-h\"><span class=\"nrp-num\">B.2<\/span><span>Global source register<\/span><\/h2><p class=\"nrp-stand\">The governed source set behind this edition. Each source keeps its authority, coverage, cadence and role; categories describe origin, not truth.<\/p><h3 class=\"nrp-h3\">Domains bound by the register<\/h3><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">INF<\/li><li class=\"nf-ui-chip\">DAT<\/li><li class=\"nf-ui-chip\">FIN<\/li><li class=\"nf-ui-chip\">GOV<\/li><li class=\"nf-ui-chip\">HLT<\/li><li class=\"nf-ui-chip\">AIC<\/li><li class=\"nf-ui-chip\">TRD<\/li><li class=\"nf-ui-chip\">WAT<\/li><li class=\"nf-ui-chip\">ENE<\/li><li class=\"nf-ui-chip\">FOO<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab3\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.3<\/span><span class=\"nrp-tbl-t\">Global source register<\/span><\/caption><thead><tr><th scope=\"col\">Source<\/th><th scope=\"col\">Category<\/th><th scope=\"col\">Coverage<\/th><th scope=\"col\">Period<\/th><th scope=\"col\">Cadence<\/th><th scope=\"col\">Role<\/th><\/tr><\/thead><tbody><tr><td>ITU Facts and Figures 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><td>intergovernmental agency<\/td><td>global<\/td><td>2025<\/td><td>annual<\/td><td>connectivity<\/td><\/tr><tr><td>FBI IC3 Annual Report 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><td>law enforcement<\/td><td>United States<\/td><td>2025<\/td><td>annual<\/td><td>crime reports<\/td><\/tr><tr><td>ENISA Threat Landscape 2025<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n3\" aria-label=\"Note 3\">3<\/a><\/sup><\/td><td>EU agency<\/td><td>EU<\/td><td>2025<\/td><td>annual<\/td><td>threat landscape<\/td><\/tr><tr><td>ITU Global Cybersecurity Index 2024<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n4\" aria-label=\"Note 4\">4<\/a><\/sup><\/td><td>intergovernmental agency<\/td><td>global<\/td><td>2024<\/td><td>periodic<\/td><td>national capacity<\/td><\/tr><tr><td>CISA known exploited vulnerabilities<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n7\" aria-label=\"Note 7\">7<\/a><\/sup><\/td><td>national agency<\/td><td>global entries<\/td><td>2026<\/td><td>continuous<\/td><td>exploited flaws<\/td><\/tr><tr><td>UNODC Convention page<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n9\" aria-label=\"Note 9\">9<\/a><\/sup><\/td><td>UN agency<\/td><td>global<\/td><td>2026<\/td><td>continuous<\/td><td>treaty status<\/td><\/tr><tr><td>ITU article on cable resilience<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><td>intergovernmental agency<\/td><td>global<\/td><td>2026<\/td><td>one-off<\/td><td>cable faults<\/td><\/tr><tr><td>Access Now KeepItOn report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><td>civil society coalition<\/td><td>global<\/td><td>2025<\/td><td>annual<\/td><td>shutdowns<\/td><\/tr><tr><td>UK Cyber Security Breaches Survey<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n28\" aria-label=\"Note 28\">28<\/a><\/sup><\/td><td>national government<\/td><td>United Kingdom<\/td><td>2026<\/td><td>annual<\/td><td>business prevalence<\/td><\/tr><tr><td>Chainalysis ransomware analysis<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n29\" aria-label=\"Note 29\">29<\/a><\/sup><\/td><td>commercial analytics<\/td><td>global on-chain<\/td><td>2025<\/td><td>annual<\/td><td>payments<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">FIXTURE PROHIBITION<\/p><p>No demonstration or reference-cartographic fixture is used as evidence in this edition. The publication gate checks every binding against this register.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s3\" aria-labelledby=\"nx-nrp-gs-13-cb-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s3-h\"><span class=\"nrp-num\">B.3<\/span><span>Regional reading: the digital layer across ten clusters<\/span><\/h2><p class=\"nrp-stand\">Map plates follow with the regional Baseline Editions, when boundary sources and public-safe resolutions are bound. This page gives the regional reading in table form and ranks no region.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab4\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.4<\/span><span class=\"nrp-tbl-t\">Regional reading: the digital layer across ten clusters<\/span><\/caption><thead><tr><th scope=\"col\">Region<\/th><th scope=\"col\">Principal hazards<\/th><th scope=\"col\">Systems most exposed<\/th><th scope=\"col\">Baseline evidence<\/th><\/tr><\/thead><tbody><tr><td>North America<\/td><td>victim-reported fraud and ransomware; concentrated cloud providers<\/td><td>finance, health, services<\/td><td>FBI report<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n2\" aria-label=\"Note 2\">2<\/a><\/sup><\/td><\/tr><tr><td>South America<\/td><td>connectivity gaps between and within countries<\/td><td>households, services<\/td><td>ITU Americas range 88 to 93% with CIS and Europe<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup><\/td><\/tr><tr><td>Europe<\/td><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.social-engineering\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Deception such as phishing, impersonation or pretexting that tricks people into handing over access, money or data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">phishing<\/a>, exploitation, hacktivist denial of service and state-aligned espionage<\/td><td>public administration, transport, finance<\/td><td>ENISA<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n3\" aria-label=\"Note 3\">3<\/a><\/sup>; EU legal acts<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n19\" id=\"nx-nrp-gs-13-cb-r19\" aria-label=\"Note 19\">19<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n20\" id=\"nx-nrp-gs-13-cb-r20\" aria-label=\"Note 20\">20<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n21\" id=\"nx-nrp-gs-13-cb-r21\" aria-label=\"Note 21\">21<\/a><\/sup><\/td><\/tr><tr><td>Eurasia<\/td><td>connectivity and shutdown records<\/td><td>services, media<\/td><td>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup>; Access Now<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><\/tr><tr><td>Middle East and North Africa<\/td><td>Arab States Internet use at 70%; cable routes through shared seas<\/td><td>households, trade<\/td><td>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup>; cable faults<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><\/tr><tr><td>Africa<\/td><td>Internet use at 36%; regional cable outages noted by the Internet Society<\/td><td>households, health, services<\/td><td>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup>; ISOC<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/td><\/tr><tr><td>South Asia<\/td><td>shutdown records and fast-growing use<\/td><td>services, households<\/td><td>Access Now<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n27\" aria-label=\"Note 27\">27<\/a><\/sup><\/td><\/tr><tr><td>East Asia<\/td><td>state-sponsored activity named in joint advisories; high connectivity<\/td><td>telecommunications, government<\/td><td>advisories<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n25\" id=\"nx-nrp-gs-13-cb-r25\" aria-label=\"Note 25\">25<\/a><\/sup><\/td><\/tr><tr><td>ASEAN<\/td><td><a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h118\" data-tc=\"NHS-1 soc.crime.mass-fraud\" data-tk=\"Society, conflict and economy \u00b7 Organised crime and illicit economies\" data-td=\"Industrial-scale scams and fraud, often using call centres, fake identities and synthetic media, that steal savings and benefits and sometimes rely on trafficked workers.\" data-ts=\"NRS-H118\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/soc\/\" data-txl=\"Society, conflict and economy\">scam compounds<\/a> and cyber-enabled fraud operations<\/td><td>households, finance<\/td><td>UNODC<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n11\" id=\"nx-nrp-gs-13-cb-r11\" aria-label=\"Note 11\">11<\/a><\/sup><\/td><\/tr><tr><td>Oceania-Pacific<\/td><td>small island dependence on few cables<\/td><td>households, services<\/td><td>ITU<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n48\" aria-label=\"Note 48\">48<\/a><\/sup>; cable faults<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">MAP PLATES WITH THE REGIONAL EDITIONS<\/p><p>Each plate will carry its boundary source and version, projection, resolution, classification, uncertainty encoding and public-safe transform, with text and table alternatives.<\/p><\/aside><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>Regional readings summarise the cited evidence. They are not risk ratings of any region or country.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s4\" aria-labelledby=\"nx-nrp-gs-13-cb-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s4-h\"><span class=\"nrp-num\">B.4<\/span><span>Route card: international submarine cable systems<\/span><\/h2><ul class=\"nrp-chips\"><li class=\"nf-ui-chip\">cable<\/li><li class=\"nf-ui-chip\">landing point<\/li><li class=\"nf-ui-chip\">repair<\/li><li class=\"nf-ui-chip\">shared route<\/li><\/ul><dl class=\"nrp-dl\"><dt>Systems in view<\/dt><dd>connectivity, finance, health, public services<\/dd><dt>Defining facts<\/dt><dd>about 200 faults a year; over 99% of international data traffic by the ITU\u2019s estimate, 97 to 98% by the Internet Society\u2019s<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/dd><dt>Couplings<\/dt><dd>INF \u2192 FIN payments; INF \u2192 HLT records; INF \u2192 TRD logistics<\/dd><dt>Capability evidence<\/dt><dd>ITU and cable industry advisory body formed in 2024; regional repair arrangements under discussion<sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n12\" aria-label=\"Note 12\">12<\/a><\/sup><sup class=\"nrp-fn\"><a href=\"#nx-nrp-gs-13-cb-n13\" aria-label=\"Note 13\">13<\/a><\/sup><\/dd><dt>Gaps<\/dt><dd>repair vessel availability; landing point diversity by country<\/dd><dt>Agenda items<\/dt><dd>C-04 \u00b7 C-05<\/dd><\/dl><div class=\"nrp-cards\"><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">The ITU reports that over 80% of cable faults come from fishing and anchoring; the Internet Society states that most disruption is natural or human error [12] [13].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">ROUTE<\/h3><p>Fishing and anchoring<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">A region served by few routes shares its connectivity risk, so a local fault can degrade many services.<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">SECURITY<\/h3><p>Concentration<\/p><\/article><article class=\"nf-ui-card nrp-card\"><p class=\"nf-ui-eyebrow\">The ITU article and the Internet Society brief are policy analyses, not an attribution of fault to any actor [12] [13].<\/p><h3 class=\"nf-ui-title\" data-level=\"card\">LEARNING<\/h3><p>Public advisories<\/p><\/article><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">evidence<\/p><p>Route cards are generated for the major shared cable routes and exchange points with the regional Baseline Editions. The cable card is shown first because its fault statistics are published.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s5\" aria-labelledby=\"nx-nrp-gs-13-cb-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s5-h\"><span class=\"nrp-num\">B.5<\/span><span>How countries appear in the cyber and digital systems edition<\/span><\/h2><p class=\"nrp-stand\">Countries enter the cyber and digital edition through the digital chapters of their own national editions, on one card grammar. They are read against peer distributions and thresholds, never ranked.<\/p><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab5\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.5<\/span><span class=\"nrp-tbl-t\">How countries appear in the cyber and digital systems edition<\/span><\/caption><thead><tr><th scope=\"col\">Card field<\/th><th scope=\"col\">What it shows<\/th><th scope=\"col\">Source<\/th><\/tr><\/thead><tbody><tr><td>WEFH+B state<\/td><td>each core system against peer distribution bands<\/td><td>national edition<\/td><\/tr><tr><td>Couplings<\/td><td>the national dependency matrix<\/td><td>national edition<\/td><\/tr><tr><td>Risk objects<\/td><td>the national risk portfolio<\/td><td>national edition<\/td><\/tr><tr><td>Capability rungs<\/td><td>the national capability ladder<\/td><td>national edition<\/td><\/tr><tr><td>Evidence age<\/td><td>oldest and newest source dates<\/td><td>national source register<\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Editions in the 2026 Baseline programme<\/h3><div class=\"pp-cells nrp-cells-3\"><div class=\"nrp-cell\"><span class=\"pp-metric\">26<\/span><span class=\"nrp-cell-u\">national<\/span><p>countries and unions<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">10<\/span><span class=\"nrp-cell-u\">regional<\/span><p>clusters<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">16<\/span><span class=\"nrp-cell-u\">global<\/span><p>flagship and sector<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">14<\/span><span class=\"nrp-cell-u\">strategic<\/span><p><a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> reports<\/p><\/div><div class=\"nrp-cell\"><span class=\"pp-metric\">20<\/span><span class=\"nrp-cell-u\">frontier<\/span><p>technology reports<\/p><\/div><\/div><h3 class=\"nrp-h3\">How to read a country card<\/h3><ul class=\"nrp-list\"><li>Each system is shown against the distribution of its peers, with thresholds where they exist<\/li><li>Couplings and risk objects come from the country\u2019s own national edition<\/li><li>Capability rungs record evidence, not a judgement of institutions<\/li><li>Evidence age is printed, so older national data are visible as such<\/li><\/ul><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab6\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.6<\/span><span class=\"nrp-tbl-t\">National Baseline Editions in the 2026 programme<\/span><\/caption><thead><tr><th scope=\"col\">Wave<\/th><th scope=\"col\">Countries and unions<\/th><th scope=\"col\">State<\/th><\/tr><\/thead><tbody><tr><td>W0<\/td><td>Canada<\/td><td>ISSUED<\/td><\/tr><tr><td>W1<\/td><td>United States, United Kingdom, France, Germany, Italy, Japan, European Union, Switzerland<\/td><td>PLANNED<\/td><\/tr><tr><td>W2<\/td><td>Mexico, Brazil, Argentina, T\u00fcrkiye, Russian Federation, Saudi Arabia, United Arab Emirates, South Africa, Senegal, Kenya, African Union, India, China, Republic of Korea, Indonesia, Singapore, Australia<\/td><td>PLANNED<\/td><\/tr><\/tbody><\/table><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">boundary<\/p><p>External rankings, where cited, keep their own method and source. Nexus never converts them into a rating, and each country\u2019s ownership of its national edition is unaffected by its appearance here.<\/p><\/aside><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s6\" aria-labelledby=\"nx-nrp-gs-13-cb-s6-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s6-h\"><span class=\"nrp-num\">B.6<\/span><span>Licences<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab7\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.7<\/span><span class=\"nrp-tbl-t\">Licences of each kind of material<\/span><\/caption><thead><tr><th scope=\"col\">Material<\/th><th scope=\"col\">Licence<\/th><\/tr><\/thead><tbody><tr><td>Text<\/td><td>CC BY 4.0<\/td><\/tr><tr><td>Data<\/td><td>on the licence of each source; Nexus tables CC BY 4.0<\/td><\/tr><tr><td>Figures<\/td><td>Nexus figures CC BY 4.0; third-party as credited<\/td><\/tr><tr><td>Maps<\/td><td>boundary source and licence printed on each plate<\/td><\/tr><tr><td>Metadata<\/td><td>CC0 1.0, as Zenodo publishes it<\/td><\/tr><tr><td>Third-party data, figures and text<\/td><td>The source&#8217;s own licence, credited where it is used; never relicensed<\/td><\/tr><\/tbody><tfoot><tr><td colspan=\"2\">Nexus-authored text, tables and figures: CC BY 4.0 (SPDX CC-BY-4.0). Map plates print their boundary source and licence.<\/td><\/tr><\/tfoot><\/table><\/div><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-s7\" aria-labelledby=\"nx-nrp-gs-13-cb-s7-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-s7-h\"><span class=\"nrp-num\">B.7<\/span><span>Formats and provenance<\/span><\/h2><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cb-tab8\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table B.8<\/span><span class=\"nrp-tbl-t\">This edition in every format<\/span><\/caption><thead><tr><th scope=\"col\">Format<\/th><th scope=\"col\">Kind<\/th><th scope=\"col\">State<\/th><th scope=\"col\">What it is<\/th><th scope=\"col\">Identifier<\/th><\/tr><\/thead><tbody><tr><td>Web edition<\/td><td><span class=\"nrp-mono\">HTML<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>Draft in stewardship review; every value resolves to its source.<\/td><td><span class=\"nrp-mono\">NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0<\/span><\/td><\/tr><tr><td>Print edition<\/td><td><span class=\"nrp-mono\">PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"release\">At release<\/span><\/td><td>A4 portrait \u00b7 screen, print and archival PDF, signed with the web edition at release.<\/td><td><span class=\"nrp-mono\">NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0<\/span><\/td><\/tr><tr><td>Indicator data<\/td><td><span class=\"nrp-mono\">CSV \u00b7 JSON<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>22 indicators with unit, year, status and source; the machine-readable copy ships with the evidence bundle at release.<\/td><td><span class=\"nrp-mono\">NR-SECTOR-CYBER-GLOBAL-2026-BASELINE data release v1<\/span><\/td><\/tr><tr><td>Figures<\/td><td><span class=\"nrp-mono\">SVG \u00b7 PNG<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"here\">On this site<\/span><\/td><td>4 on the web edition: headline figure, figure 1.3, coupling instrument, capability ladder.<\/td><td><span class=\"nrp-mono\">FIG-SECTOR-CYBER-GLOBAL-2026-BASELINE-*<\/span><\/td><\/tr><tr><td>Slides<\/td><td><span class=\"nrp-mono\">PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"none\">Not recorded<\/span><\/td><td>No slide deck is recorded for this edition.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><tr><td>Evidence brief<\/td><td><span class=\"nrp-mono\">HTML \u00b7 PDF<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"none\">Not recorded<\/span><\/td><td>No evidence brief is recorded for this edition.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><tr><td>Dataset with DOI<\/td><td><span class=\"nrp-mono\">DataCite<\/span><\/td><td><span class=\"nx-nr-out-s\" data-state=\"release\">At release<\/span><\/td><td>Concept and version DOI are minted at deposit; none is recorded yet.<\/td><td><span class=\"nrp-mono\"><\/span><\/td><\/tr><\/tbody><\/table><\/div><h3 class=\"nrp-h3\">Provenance<\/h3><dl class=\"nrp-dl\"><dt>Edition pack<\/dt><dd>The edition&#8217;s content pack (JSON), from which the print and web editions are built<\/dd><dt>Evidence cut<\/dt><dd>DC-SECTOR-CYBER-GLOBAL-2026-B0, closed 30 September 2026<\/dd><dt>Reproducibility<\/dt><dd>sourced values cited; analytical values reproducible from stated parameters<\/dd><dt>Self-check<\/dt><dd>14 of 23 at evidence close; a fail on any item blocks release<\/dd><dt>Review<\/dt><dd>five passes scheduled before release (in Annex C)<\/dd><dt>Publisher of record<\/dt><dd>GCRI for the Nexus Consortium<\/dd><dt>Corrections<\/dt><dd>Registry correction pathway; upheld corrections are published as notices with a new version<\/dd><\/dl><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cb-notes\" aria-labelledby=\"nx-nrp-gs-13-cb-notes-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cb-notes-h\"><span>Notes<\/span><\/h2><p class=\"nrp-note\">Numbers are the edition&#8217;s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. <a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/references\/\">Annex C, references<\/a><\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-cb-n48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r48\" aria-label=\"Back to the first call of note 48\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r2\" aria-label=\"Back to the first call of note 2\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r29\" aria-label=\"Back to the first call of note 29\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r3\" aria-label=\"Back to the first call of note 3\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r7\" aria-label=\"Back to the first call of note 7\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), National Vulnerability Database, CVE API version 2.0 (records published in 2024 and in 2025, excluding rejected records, counted by the editors from four quarterly queries per year; 39,953 and 48,150). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r8\" aria-label=\"Back to the first call of note 8\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r4\" aria-label=\"Back to the first call of note 4\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r9\" aria-label=\"Back to the first call of note 9\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r12\" aria-label=\"Back to the first call of note 12\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n27\"><span class=\"nrp-notes-n\">27<\/span><span>Access Now and the #KeepItOn coalition (eds.), Rising Repression Meets Global Resistance: Internet Shutdowns in 2025 (annual report, March 2026). Access Now, New York. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r27\" aria-label=\"Back to the first call of note 27\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n28\"><span class=\"nrp-notes-n\">28<\/span><span>UK Department for Science, Innovation and Technology and partners (eds.), Cyber Security Breaches Survey 2025\/2026 (30 April 2026; survey of businesses and charities). UK Government, London. Observation year 2026 (survey covering the preceding 12 months). Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r28\" aria-label=\"Back to the first call of note 28\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r5\" aria-label=\"Back to the first call of note 5\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r13\" aria-label=\"Back to the first call of note 13\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r19\" aria-label=\"Back to the first call of note 19\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r20\" aria-label=\"Back to the first call of note 20\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r21\" aria-label=\"Back to the first call of note 21\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n25\"><span class=\"nrp-notes-n\">25<\/span><span>CISA, FBI, NSA and partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, joint cybersecurity advisory (27 August 2025). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r25\" aria-label=\"Back to the first call of note 25\">back<\/a><\/span><\/li><li id=\"nx-nrp-gs-13-cb-n11\"><span class=\"nrp-notes-n\">11<\/span><span>UNODC (ed.), Inflection Point: Global Implications of Scam Centres, Underground Banking and Illicit Online Marketplaces in Southeast Asia (April 2025). United Nations Office on Drugs and Crime, Bangkok. Observation year 2025. Accessed 2026-11-03.<a class=\"nrp-notes-back\" href=\"#nx-nrp-gs-13-cb-r11\" aria-label=\"Back to the first call of note 11\">back<\/a><\/span><\/li><\/ol><\/section><\/div><div class=\"nrp-part\" id=\"nx-nrp-gs-13-part-references\"><header class=\"nrp-chap-head\" id=\"nx-nrp-gs-13-cc-top\"><ul class=\"nrp-eyerow\"><li class=\"nf-ui-eyebrow\"><a href=\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\">Global Cyber and Digital Systems 2026<\/a><\/li><li class=\"nf-ui-eyebrow\">Annex C<\/li><\/ul><span class=\"nrp-rule\" aria-hidden=\"true\"><\/span><h2 class=\"pp-hero-title\">References and record<\/h2><p class=\"nrp-lede\">Every source the edition rests on, the publication record, the corrections log and the open record.<\/p><p class=\"nrp-chap-meta\"><span>14 min read<\/span><span>0 figures<\/span><span>1 table<\/span><span>0 notes<\/span><span>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE<\/span><\/p><\/header><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cc-s1\" aria-labelledby=\"nx-nrp-gs-13-cc-s1-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cc-s1-h\"><span class=\"nrp-num\">C.1<\/span><span>48 sources<\/span><\/h2><p class=\"nrp-stand\">NR-CIT-1, editor first. A DOI is linked where the source has one; Nexus records carry a <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/uni\/\" data-tc=\"UNI\" data-tk=\"Nexus Standards\" data-td=\"The universal identifier of every Nexus artifact (NS-1)\">UNI<\/a> once the catalogue allocates it (NS-1).<\/p><ol class=\"nrp-notes\"><li id=\"nx-nrp-gs-13-ref-1\"><span class=\"nrp-notes-n\">1<\/span><span>POST-CLOSE, context only: Post-close, context only: ITU (ed.), Measuring digital development: Facts and Figures 2026 (released 3 November 2026, after the 30 September 2026 evidence close; supports no baseline claim). International Telecommunication Union, Geneva. Observation year 2026 (estimates, with 2025 comparison). Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-2\"><span class=\"nrp-notes-n\">2<\/span><span>FBI Internet Crime Complaint Center (ed.), 2025 IC3 Annual Report. Federal Bureau of Investigation, Washington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-3\"><span class=\"nrp-notes-n\">3<\/span><span>ENISA (ed.), ENISA Threat Landscape 2025 (October 2025; incidents from 1 July 2024 to 30 June 2025). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-4\"><span class=\"nrp-notes-n\">4<\/span><span>ITU (ed.), Global Cybersecurity Index 2024 (fifth edition, collection years 2023 to 2024). International Telecommunication Union, Geneva. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-5\"><span class=\"nrp-notes-n\">5<\/span><span>World Economic Forum (ed.), Global Cybersecurity Outlook 2026 (January 2026; executive survey, perceptions rather than measured rates). World Economic Forum, Geneva. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-6\"><span class=\"nrp-notes-n\">6<\/span><span>ISC2 (ed.), 2025 ISC2 Cybersecurity Workforce Study (December 2025; 16,029 respondents; states that it includes no estimate of the workforce gap). ISC2, Alexandria. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-7\"><span class=\"nrp-notes-n\">7<\/span><span>CISA (ed.), Known Exploited Vulnerabilities Catalog, machine-readable file, catalogue version 2026.11.03 (1,767 entries; read on 2026-11-03; entries counted by the editors from the date added and the ransomware-use flag). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 2, chapter 3, chapter 4, chapter 6, chapter 7<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-8\"><span class=\"nrp-notes-n\">8<\/span><span>NIST (ed.), National Vulnerability Database, CVE API version 2.0 (records published in 2024 and in 2025, excluding rejected records, counted by the editors from four quarterly queries per year; 39,953 and 48,150). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-9\"><span class=\"nrp-notes-n\">9<\/span><span>UNODC (ed.), United Nations Convention against Cybercrime, convention page (status: 96 signatories and 3 States Parties at the access date; opened for signature in Hanoi on 25 October 2025). United Nations Office on Drugs and Crime, Vienna. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-10\"><span class=\"nrp-notes-n\">10<\/span><span>United Nations General Assembly (ed.), Resolution 80\/16 on the final report of the open-ended working group on security of and in the use of information and communications technologies (endorses A\/80\/257; Global Mechanism from 2026). United Nations, New York, December 2025. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-11\"><span class=\"nrp-notes-n\">11<\/span><span>UNODC (ed.), Inflection Point: Global Implications of Scam Centres, Underground Banking and Illicit Online Marketplaces in Southeast Asia (April 2025). United Nations Office on Drugs and Crime, Bangkok. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-12\"><span class=\"nrp-notes-n\">12<\/span><span>Lamanauskas, T. and Veverka, D., The world is coming together to strengthen submarine cable resilience (ITU news article, 2 February 2026). International Telecommunication Union, Geneva. Observation year 2026. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 5, chapter 6, chapter 7, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-13\"><span class=\"nrp-notes-n\">13<\/span><span>Internet Society (ed.), Enhancing the Resilience of Submarine Internet Infrastructure (public policy brief, November 2025). Internet Society, Reston. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 2, chapter 4, chapter 6, chapter 7, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-14\"><span class=\"nrp-notes-n\">14<\/span><span>CrowdStrike (ed.), External Technical Root Cause Analysis: Channel File 291 (August 2024). CrowdStrike, Austin. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 5, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-15\"><span class=\"nrp-notes-n\">15<\/span><span>NIST (ed.), The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (February 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-16\"><span class=\"nrp-notes-n\">16<\/span><span>NIST (ed.), Module-Lattice-Based Key-Encapsulation Mechanism Standard, FIPS 203 (13 August 2024). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-17\"><span class=\"nrp-notes-n\">17<\/span><span>NIST (ed.), Post-Quantum Cryptography standardisation project page (FIPS 203, 204 and 205 published 13 August 2024; HQC selected 11 March 2025). National Institute of Standards and Technology, Gaithersburg. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-18\"><span class=\"nrp-notes-n\">18<\/span><span>Moody, D. et al., Transition to Post-Quantum Cryptography Standards, NIST IR 8547, initial public draft (November 2024; proposes deprecation after 2030 and disallowance after 2035 for quantum-vulnerable algorithms; a draft). National Institute of Standards and Technology, Gaithersburg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-19\"><span class=\"nrp-notes-n\">19<\/span><span>Directive (EU) 2022\/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-20\"><span class=\"nrp-notes-n\">20<\/span><span>Regulation (EU) 2024\/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act), Official Journal of the European Union, 20 November 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-21\"><span class=\"nrp-notes-n\">21<\/span><span>Regulation (EU) 2022\/2554 on digital operational resilience for the financial sector (DORA), Official Journal of the European Union L 333, 27 December 2022. Publications Office of the European Union, Luxembourg. Observation year 2022. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-22\"><span class=\"nrp-notes-n\">22<\/span><span>Regulation (EU) 2024\/1689 laying down harmonised rules on artificial intelligence (AI Act), Official Journal of the European Union, 2024. Publications Office of the European Union, Luxembourg. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-23\"><span class=\"nrp-notes-n\">23<\/span><span>Neprash, H.T. et al., Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021, JAMA Health Forum 3(12), e224873, 2022 (open access full text). American Medical Association, Chicago. Observation year 2022 (data 2016 to 2021). Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 5, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-24\"><span class=\"nrp-notes-n\">24<\/span><span>Fang, R., Bindu, R., Gupta, A. and Kang, D., LLM Agents can Autonomously Exploit One-day Vulnerabilities, arXiv preprint 2404.08144, April 2024 (not peer reviewed; 15 vulnerabilities). Cornell University, Ithaca. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 2, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-25\"><span class=\"nrp-notes-n\">25<\/span><span>CISA, FBI, NSA and partner agencies (eds.), Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System, joint cybersecurity advisory (27 August 2025). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-26\"><span class=\"nrp-notes-n\">26<\/span><span>CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-c1\" data-tc=\"NRS-C1 critical-infrastructure\" data-tk=\"Nexus risk vocabulary\" data-td=\"Physical and digital assets, systems and networks whose disruption would seriously affect health, safety, security, economic welfare or the functioning of government. Criticality depends on what relies on them.\" data-ts=\"NRS-C1\" data-tr=\"draft\">Critical Infrastructure<\/a>, joint advisory AA24-038A (7 February 2024). Cybersecurity and Infrastructure Security Agency, Arlington. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-27\"><span class=\"nrp-notes-n\">27<\/span><span>Access Now and the #KeepItOn coalition (eds.), Rising Repression Meets Global Resistance: Internet Shutdowns in 2025 (annual report, March 2026). Access Now, New York. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 3, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-28\"><span class=\"nrp-notes-n\">28<\/span><span>UK Department for Science, Innovation and Technology and partners (eds.), Cyber Security Breaches Survey 2025\/2026 (30 April 2026; survey of businesses and charities). UK Government, London. Observation year 2026 (survey covering the preceding 12 months). Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-29\"><span class=\"nrp-notes-n\">29<\/span><span>Chainalysis (ed.), Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate (analysis dated 26 February 2026; on-chain data). Chainalysis, New York. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 7<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-30\"><span class=\"nrp-notes-n\">30<\/span><span>World Bank (ed.), Digital Progress and Trends Report 2025: Strengthening AI Foundations. World Bank, Washington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 1, chapter 2, chapter 3, chapter 4, chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-31\"><span class=\"nrp-notes-n\">31<\/span><span>United Nations General Assembly (ed.), Global Digital Compact, A\/79\/L.2 (September 2024). United Nations, New York. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 2, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-32\"><span class=\"nrp-notes-n\">32<\/span><span>UNVERIFIED, not opened: Verizon (ed.), 2026 <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/nrs\/#nrs-h51\" data-tc=\"NHS-1 cyber.intrusion.data-breach\" data-tk=\"Information and cyber-physical systems \u00b7 Malicious compromise\" data-td=\"Unauthorised access to, or release of, personal, commercial or operational data.\" data-ts=\"NRS-H51\" data-tr=\"draft\" data-tx=\"https:\/\/risksindex.com\/hazards\/cyber\/\" data-txl=\"Information and cyber-physical systems\">Data Breach<\/a> Investigations Report (third-party involvement in 48% of breaches and exploitation as 31% of initial access in search summaries; the page opened held no figures). Verizon, New York. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-33\"><span class=\"nrp-notes-n\">33<\/span><span>UNVERIFIED, not opened: Chainalysis (ed.), 2026 Crypto Crime Report (illicit receipts of about USD 154 billion in 2025 in search summaries); the page returned an error. Chainalysis, New York. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-34\"><span class=\"nrp-notes-n\">34<\/span><span>UNVERIFIED, not opened: US Department of Health and Human Services Office for Civil Rights, breach portal entry for the Change Healthcare breach (192.7 million individuals in search summaries); the portal opened without the record. HHS OCR, Washington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-35\"><span class=\"nrp-notes-n\">35<\/span><span>UNVERIFIED, not opened: International Monetary Fund (ed.), Global Financial Stability Report, April 2024, chapter 3 on cyber risk and financial stability; the page returned an access error and no figure is used. IMF, Washington. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-36\"><span class=\"nrp-notes-n\">36<\/span><span>UNVERIFIED, not opened: UK National Cyber Security Centre (ed.), Annual Review 2025; the page address returned not found and no figure is used. NCSC, London. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-37\"><span class=\"nrp-notes-n\">37<\/span><span>UNVERIFIED, not opened: Europol (ed.), Internet Organised Crime Threat Assessment 2025: Steal, deal and repeat; the file returned not found and no figure is used. Europol, The Hague. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-38\"><span class=\"nrp-notes-n\">38<\/span><span>UNVERIFIED, not opened: IBM (ed.), Cost of a Data Breach Report 2025; gated and no figure is used. IBM, Armonk. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 4, chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-39\"><span class=\"nrp-notes-n\">39<\/span><span>UNVERIFIED, not opened: Microsoft (ed.), Microsoft Digital Defense Report 2025; access denied and no figure is used. Microsoft, Redmond. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-40\"><span class=\"nrp-notes-n\">40<\/span><span>UNVERIFIED, not opened: Council of Europe, Convention on Cybercrime (Budapest Convention), CETS No. 185, 2001, cited from memory; the site blocked access and no figure is used. Council of Europe, Strasbourg. Observation year 2001. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-41\"><span class=\"nrp-notes-n\">41<\/span><span>UNVERIFIED, not opened: ISO and IEC (eds.), ISO\/IEC 27001:2022, Information security management <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a>: requirements, cited from memory. International Organization for Standardization, Geneva. Observation year 2022. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-42\"><span class=\"nrp-notes-n\">42<\/span><span>UNVERIFIED, not opened: IEC (ed.), IEC 62443 series, Security for industrial automation and control systems, cited from memory. International Electrotechnical Commission, Geneva. Observation year 2018. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6, chapter 8<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-43\"><span class=\"nrp-notes-n\">43<\/span><span>UNVERIFIED, not opened: United Nations General Assembly (ed.), Final report of the open-ended working group on security of and in the use of information and communications technologies 2021 to 2025, A\/80\/257; read only through resolution 80\/16 [10]. United Nations, New York. Observation year 2025. Accessed 2026-11-03.<\/span><\/li><li id=\"nx-nrp-gs-13-ref-44\"><span class=\"nrp-notes-n\">44<\/span><span>ITU (ed.), Measuring digital development: Facts and Figures 2025 (released 17 November 2025; pages on Internet use, mobile network coverage, Internet use in urban and rural areas and ICT skills opened, with the press release; 2025 aggregates are ITU estimates). International Telecommunication Union, Geneva. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-45\"><span class=\"nrp-notes-n\">45<\/span><span>UNVERIFIED, not opened: TeleGeography (ed.), Submarine Cable Map (570 cables in 2025 with 81 planned, as quoted in the Internet Society brief [13]); the source was not opened. TeleGeography, Washington. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-46\"><span class=\"nrp-notes-n\">46<\/span><span>UNVERIFIED, not opened: Dameff, C. et al., Ransomware Attacks, ED Visits and Inpatient Admissions in Targeted and Nearby Hospitals, JAMA, 2024, pages 2129 to 2131; listed in a literature index and the text was not read. American Medical Association, Chicago. Observation year 2024. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-47\"><span class=\"nrp-notes-n\">47<\/span><span>UNVERIFIED, not opened: US Securities and Exchange Commission (ed.), Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, final rule, 2023, cited from memory and no figure is used. SEC, Washington. Observation year 2023. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in chapter 6<\/span><\/span><\/li><li id=\"nx-nrp-gs-13-ref-48\"><span class=\"nrp-notes-n\">48<\/span><span>UNVERIFIED, not opened: Cloudflare (ed.), DDoS threat report; the page address returned not found and no figure is used. Cloudflare, San Francisco. Observation year 2025. Accessed 2026-11-03. <span class=\"nrp-cell-u\">Cited in the summary, chapter 1, chapter 2, chapter 3, chapter 4, chapter 6<\/span><\/span><\/li><\/ol><\/section><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cc-s2\" aria-labelledby=\"nx-nrp-gs-13-cc-s2-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cc-s2-h\"><span class=\"nrp-num\">C.2<\/span><span>Publication record<\/span><\/h2><div class=\"nrp-split\"><div><h3 class=\"nrp-h3\">Publication<\/h3><dl class=\"nrp-dl\"><dt>Title<\/dt><dd>Global Cyber and digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">systems<\/a> Risk &amp; Resilience Report 2026: Baseline Edition<\/dd><dt>Series<\/dt><dd>Reports \u00b7 Global Sector Series GS-13<\/dd><dt>Edition<\/dt><dd>Baseline Edition 2026 \u00b7 inaugural annual<\/dd><dt>Version<\/dt><dd>v1.0.0 \u00b7 draft for stewardship review<\/dd><dt>Publication ID<\/dt><dd>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0<\/dd><dt>Evidence close<\/dt><dd>30 September 2026<\/dd><dt>Publication date<\/dt><dd>October 2026<\/dd><dt>DOI<\/dt><dd>concept and version DOI at deposit<\/dd><\/dl><\/div><div><h3 class=\"nrp-h3\">Publisher<\/h3><dl class=\"nrp-dl\"><dt>Publisher of record<\/dt><dd>The Global Centre for Risk and Innovation (GCRI), for the Nexus Consortium<\/dd><dt>Place<\/dt><dd>Toronto<\/dd><dt>Editor<\/dt><dd>Saeed Valadbaygi, Chief Steward and Managing Editor<\/dd><dt>Stewards<\/dt><dd>GCRI \u00b7 technical truth \u00b7 GRF \u00b7 public meaning \u00b7 GRA \u00b7 capital meaning<\/dd><dt>Licence<\/dt><dd>text CC BY 4.0; data on the terms of each source<\/dd><dt>Copyright<\/dt><dd>\u00a9 2026 GCRI \u00b7 Nexus Consortium<\/dd><dt>Language<\/dt><dd>English (en-GB) source edition<\/dd><dt>Correspondence<\/dt><dd>Registry correction pathway \u00b7 editorial office<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">DISCLAIMER<\/p><p>This edition is published for research, planning and public understanding. It is not a government assessment, an official warning, a rating, a certification, investment advice or an operational authorisation. Reasonable care has been taken with every source; consult the cited originals before relying on any value.<\/p><\/aside><h3 class=\"nrp-h3\">Colophon<\/h3><dl class=\"nrp-dl\"><dt>Format<\/dt><dd>A4 portrait \u00b7 screen, print and archival PDF<\/dd><dt>Typefaces<\/dt><dd>Space Grotesk (display) \u00b7 Geist (text) \u00b7 IBM Plex Sans Italic (standfirsts) \u00b7 IBM Plex Mono (data)<\/dd><dt>Design standard<\/dt><dd>Reports Foundational Edition, Volume I, Part VII<\/dd><dt>Accessibility<\/dt><dd>tagged PDF and HTML targets; text alternatives for every figure<\/dd><dt>Production<\/dt><dd>Reports editorial team, GCRI<\/dd><\/dl><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">HOW TO CORRECT THIS EDITION<\/p><p>Report errors, omissions or objections through the Registry correction pathway. Each report is logged and answered; upheld corrections are published as notices with a new version, and the original remains resolvable.<\/p><\/aside><h3 class=\"nrp-h3\">Release path for this version<\/h3><div class=\"nrp-tblw\" id=\"nx-nrp-gs-13-cc-tab1\"><table class=\"nrp-tbl\"><caption><span class=\"nf-ui-eyebrow\">Table C.1<\/span><span class=\"nrp-tbl-t\">Release path for this version<\/span><\/caption><thead><tr><th scope=\"col\">Step<\/th><th scope=\"col\">What happens<\/th><th scope=\"col\">When<\/th><\/tr><\/thead><tbody><tr><td>Draft<\/td><td>editorial self-check complete at evidence close<\/td><td>October 2026<\/td><\/tr><tr><td>Steward review<\/td><td>five passes on the exact draft (keys T \u00b7 M \u00b7 F \u00b7 N)<\/td><td>Q4 2026<\/td><\/tr><tr><td>Approval<\/td><td>publication authority approves the exact digest<\/td><td>before release<\/td><\/tr><tr><td>Deposit<\/td><td>concept and version DOI minted; registry pointer set<\/td><td>at release<\/td><\/tr><tr><td>Succession<\/td><td>the 2027 cyber and digital systems edition reports changes against this baseline<\/td><td>2027<\/td><\/tr><\/tbody><\/table><\/div><div class=\"nrp-split\"><div><dl class=\"nrp-dl\"><dt>Current version<\/dt><dd>v1.0.0 draft, stewardship review<\/dd><dt>Previous edition<\/dt><dd>none, first edition of the series<\/dd><dt>Next edition<\/dt><dd>NR-SECTOR-CYBER-GLOBAL-2027-v1.0.0<\/dd><\/dl><\/div><div><dl class=\"nrp-dl\"><dt>Latest version<\/dt><dd>resolve the concept DOI or the registry record<\/dd><dt>Correction route<\/dt><dd>Registry correction pathway<\/dd><dt>Notice types<\/dt><dd>erratum \u00b7 addendum \u00b7 supersession \u00b7 withdrawal<\/dd><\/dl><\/div><\/div><aside class=\"nrp-call\"><p class=\"nf-ui-eyebrow\">NO CORRECTIONS \u2260 NO LIMITS<\/p><p>The absence of corrections does not mean the absence of limitations. Limitations and uncertainty are stated where they arise in the edition.<\/p><\/aside><\/section><div id=\"nx-nr-gs-13-corrections\"><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cc-s3\" aria-labelledby=\"nx-nrp-gs-13-cc-s3-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cc-s3-h\"><span class=\"nrp-num\">C.3<\/span><span>Corrections log<\/span><\/h2><div class=\"nx-nr-corr\"><p class=\"nx-nr-corr-sum\"><span class=\"nx-nr-corr-n\">0<\/span><span>correction notices. No edition has been released yet, so none can be corrected; the log below lists each edition&#8217;s current version.<\/span><\/p><div class=\"nx-table-wrap\"><table class=\"nx-table nx-rd-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Edition<\/th><th scope=\"col\">Version<\/th><th scope=\"col\">Date<\/th><th scope=\"col\">State<\/th><th scope=\"col\">Change<\/th><th scope=\"col\">Notice<\/th><\/tr><\/thead><tbody><tr><td data-label=\"Edition\"><span class=\"nx-rd-code\">GS-13<\/span><\/td><td data-label=\"Version\" class=\"nx-rd-mono\">NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0<\/td><td data-label=\"Date\">October 2026<\/td><td data-label=\"State\">Draft<\/td><td data-label=\"Change\">Baseline Edition 2026, inaugural annual edition,<\/td><td data-label=\"Notice\">None<\/td><\/tr><\/tbody><\/table><\/div><p class=\"nx-rd-source\">Notice types: erratum, addendum, supersession, withdrawal. A correction is a new version with a published notice; the earlier version stays resolvable, and no edition is ever edited in silence.<\/p><\/div><\/section><\/div><div id=\"nx-nr-gs-13-outputs\"><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cc-s4\" aria-labelledby=\"nx-nrp-gs-13-cc-s4-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cc-s4-h\"><span class=\"nrp-num\">C.4<\/span><span>Open record<\/span><\/h2><div class=\"nx-nr-os\"><div class=\"nx-nr-os-card\"><h3>This edition&#8217;s open record<\/h3><dl class=\"nx-nr-os-kv\"><dt>Publication ID<\/dt><dd>NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0<\/dd><dt>Desk identifier and series alias<\/dt><dd>NR-SEC-GS-13-2026-BL<\/dd><dt>Collection<\/dt><dd>None<\/dd><dt>DOI<\/dt><dd>Concept and version DOI at deposit, on Zenodo with DataCite metadata<\/dd><dt>Versions<\/dt><dd>Each correction is a new version (isNewVersionOf); the concept DOI resolves to the latest<\/dd><dt>Bundle<\/dt><dd>RO-Crate 1.2 with CITATION.cff, CodeMeta and PROV-O provenance; a signed manifest<\/dd><dt>Licence<\/dt><dd><a class=\"nx-link\" href=\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\" rel=\"noopener\">CC BY 4.0<\/a> (SPDX CC-BY-4.0) for original material; metadata CC0 1.0<\/dd><\/dl><\/div><div class=\"nx-nr-os-card\"><h3>Credit and identity<\/h3><dl class=\"nx-nr-os-kv\"><dt>ORCID<\/dt><dd>Your iD in the deposit and the contribution record; DataCite can then add the work to your ORCID record<\/dd><dt>ROR<\/dt><dd>Your organisation by its ROR identifier, never by a typed name alone<\/dd><dt>CRediT<\/dt><dd>Conceptualization, Data curation, Formal analysis, Investigation, Methodology, Software, Validation, Visualisation, Writing, review and editing<\/dd><dt>Account<\/dt><dd>None needed to contribute; never a password<\/dd><\/dl><\/div><div class=\"nx-nr-os-card\"><h3>Find and follow<\/h3><p class=\"nx-p\">Search the open indexes for Global Cyber and Digital Systems; software is cited by its SWHID from Software Heritage, and a quantified scenario run is preregistered on OSF before it is run. Annotation is your choice: Hypothesis opens this page in its own viewer.<\/p><ul class=\"nx-nr-os-links\"><li><a href=\"https:\/\/openalex.org\/works?search=Nexus%20Reports%20Global%20Cyber%20and%20Digital%20Systems\" rel=\"noopener\">OpenAlex<\/a><\/li><li><a href=\"https:\/\/explore.openaire.eu\/search\/find?fv0=Nexus%20Reports%20Global%20Cyber%20and%20Digital%20Systems&amp;f0=q\" rel=\"noopener\">OpenAIRE<\/a><\/li><li><a href=\"https:\/\/search.crossref.org\/search\/works?q=Nexus%20Reports%20Global%20Cyber%20and%20Digital%20Systems\" rel=\"noopener\">Crossref<\/a><\/li><li><a href=\"https:\/\/commons.datacite.org\/?query=Nexus%20Reports%20Global%20Cyber%20and%20Digital%20Systems\" rel=\"noopener\">DataCite Commons<\/a><\/li><li><a href=\"https:\/\/zenodo.org\/search?q=Nexus%20Reports%20Global%20Cyber%20and%20Digital%20Systems\" rel=\"noopener\">Zenodo<\/a><\/li><li><a href=\"https:\/\/archive.softwareheritage.org\/\" rel=\"noopener\">Software Heritage<\/a><\/li><li><a href=\"https:\/\/osf.io\/prereg\/\" rel=\"noopener\">OSF preregistration<\/a><\/li><li><a href=\"https:\/\/via.hypothes.is\/https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\" rel=\"noopener\">Annotate with Hypothesis<\/a><\/li><\/ul><\/div><div class=\"nx-nr-os-card\"><h3>Mirrors and harvest<\/h3><p class=\"nx-p\">The DOI is canonical. At release each signed bundle is also given an IPFS content identifier and a bloxberg anchor as mirrors; both are listed in the record once they exist. Zenodo exposes every record over OAI-PMH, and reviews and endorsements can arrive through COAR Notify where the repository supports it.<\/p><\/div><\/div><div class=\"nx-mt-3\"><figure class=\"nx-nr-code\"><figcaption class=\"nx-nr-code-cap\">InvenioRDM metadata for a contribution on Global Cyber and Digital Systems, prefilled from this page<\/figcaption><pre class=\"nx-nr-pre\" tabindex=\"0\"><code>{&#10;  &quot;metadata&quot;: {&#10;    &quot;resource_type&quot;: {&#10;      &quot;id&quot;: &quot;dataset&quot;&#10;    },&#10;    &quot;title&quot;: &quot;Evidence on Global Cyber and Digital Systems for Nexus Reports&quot;,&#10;    &quot;publication_date&quot;: &quot;YYYY-MM-DD&quot;,&#10;    &quot;creators&quot;: [&#10;      {&#10;        &quot;person_or_org&quot;: {&#10;          &quot;type&quot;: &quot;personal&quot;,&#10;          &quot;family_name&quot;: &quot;Your family name&quot;,&#10;          &quot;given_name&quot;: &quot;Your given name&quot;,&#10;          &quot;identifiers&quot;: [&#10;            {&#10;              &quot;scheme&quot;: &quot;orcid&quot;,&#10;              &quot;identifier&quot;: &quot;0000-0000-0000-0000&quot;&#10;            }&#10;          ]&#10;        },&#10;        &quot;affiliations&quot;: [&#10;          {&#10;            &quot;id&quot;: &quot;ROR identifier of your organisation&quot;&#10;          }&#10;        ]&#10;      }&#10;    ],&#10;    &quot;description&quot;: &quot;What it is, where its record is kept and how it bears on Nexus Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems..&quot;,&#10;    &quot;rights&quot;: [&#10;      {&#10;        &quot;id&quot;: &quot;cc-by-4.0&quot;&#10;      }&#10;    ],&#10;    &quot;subjects&quot;: [&#10;      {&#10;        &quot;subject&quot;: &quot;Nexus Reports&quot;&#10;      },&#10;      {&#10;        &quot;subject&quot;: &quot;Global Cyber and Digital Systems&quot;&#10;      },&#10;      {&#10;        &quot;subject&quot;: &quot;Global Sector Report \u00b7 GS-13&quot;&#10;      }&#10;    ],&#10;    &quot;related_identifiers&quot;: [&#10;      {&#10;        &quot;identifier&quot;: &quot;https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/&quot;,&#10;        &quot;scheme&quot;: &quot;url&quot;,&#10;        &quot;relation_type&quot;: {&#10;          &quot;id&quot;: &quot;issupplementto&quot;&#10;        },&#10;        &quot;resource_type&quot;: {&#10;          &quot;id&quot;: &quot;publication-report&quot;&#10;        }&#10;      }&#10;    ],&#10;    &quot;version&quot;: &quot;1.0.0&quot;&#10;  },&#10;  &quot;custom_fields&quot;: {},&#10;  &quot;access&quot;: {&#10;    &quot;record&quot;: &quot;public&quot;,&#10;    &quot;files&quot;: &quot;public&quot;&#10;  },&#10;  &quot;files&quot;: {&#10;    &quot;enabled&quot;: true&#10;  },&#10;  &quot;parent&quot;: {&#10;    &quot;communities&quot;: {&#10;      &quot;default&quot;: &quot;nexusreports&quot;&#10;    }&#10;  }&#10;}<\/code><\/pre><\/figure><\/div><div class=\"nx-nr-os-hook\" data-nx-research-hub=\"slot\" data-nx-research-context=\"{&quot;org&quot;:&quot;GCRI&quot;,&quot;site&quot;:&quot;gcri&quot;,&quot;url&quot;:&quot;https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/&quot;,&quot;kind&quot;:&quot;edition&quot;,&quot;subject&quot;:&quot;Global Cyber and Digital Systems&quot;,&quot;series&quot;:[&quot;Global Sector Report \u00b7 GS-13&quot;]}\" hidden><\/div><\/section><\/div><div id=\"nx-nr-gs-13-pillars\"><section class=\"nrp-block\" id=\"nx-nrp-gs-13-cc-s5\" aria-labelledby=\"nx-nrp-gs-13-cc-s5-h\"><h2 class=\"nrp-h2\" id=\"nx-nrp-gs-13-cc-s5-h\"><span class=\"nrp-num\">C.5<\/span><span>Where this edition sits among the six pillars<\/span><\/h2><p class=\"nrp-stand\">Foundry seals the evidence and Universe tests it; Reports publishes it; Standards takes its corrections and Academy teaches from it.<\/p><ol class=\"nx-pl-list\"><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F03 Sealed observations and indicator series<\/strong> <span class=\"nx-pl-in\">Foundry<\/span> Sealed observations and indicator series behind a profile (closeout).<\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F04 After-action and scenario findings for<\/strong> <span class=\"nx-pl-in\">Universe<\/span> After-action and scenario findings for chapters 10 and 13 (after action review).<\/li><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F05 National Portfolio movement for chapter<\/strong> <span class=\"nx-pl-in\">Foundry<\/span> National Portfolio movement for chapter 11 (after action review).<\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>Applied in editions<\/strong> <span class=\"nx-pl-in\">Standards<\/span> <a class=\"nx-link nx-term\" href=\"https:\/\/nexustandards.com\/standards\/\" data-tc=\"Nexus Standards\" data-tk=\"Nexus Standards\" data-td=\"The foundation standards\">Nexus Standards<\/a>: applied in editions.<\/li><li data-pillar=\"reports\" data-hue=\"energy\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>GS-13 edition<\/strong> <span class=\"nx-pl-in\">Reports<\/span> Global Cyber and Digital <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">Systems<\/a> 2026, published in every format with its sources, citation and corrections.<\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F06 Method and correction findings as change<\/strong> <span class=\"nx-pl-in\">Standards<\/span> Method and correction findings as change proposals (correction).<\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>F12 Q4 synthesis informs the next-year<\/strong> <span class=\"nx-pl-in\">Universe<\/span> Q4 synthesis informs the next-year mandate (renewal).<\/li><li data-pillar=\"academy\" data-hue=\"risk\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><strong>Taught in the open<\/strong> <span class=\"nx-pl-in\">Academy<\/span> Risk Academy: taught in the open.<\/li><\/ol><p class=\"nx-caption\"><span>What Foundry and Universe hand to this edition, and what it hands to Standards, Universe and Academy. From the programme spine; GS-13 is a drafted Baseline Edition, so these handoffs run from its first operational quarter.<\/span><\/p><ul class=\"nx-pl-legend\" aria-label=\"Pillars\"><li data-pillar=\"labs\" data-hue=\"social\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-labs\/\">Labs<\/a><\/li><li data-pillar=\"foundry\" data-hue=\"infrastructure\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-foundry\/\">Foundry<\/a><\/li><li data-pillar=\"universe\" data-hue=\"water\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/universe.nexus\/\">Universe<\/a><\/li><li data-pillar=\"standards\" data-hue=\"biodiversity\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/nexustandards.com\/\">Nexus Standards<\/a><\/li><li data-pillar=\"reports\" data-hue=\"energy\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/therisk.global\/nexus-reports\/\">Reports<\/a><\/li><li data-pillar=\"academy\" data-hue=\"risk\"><span class=\"nx-pl-dot\" aria-hidden=\"true\"><\/span><a class=\"nx-link\" href=\"https:\/\/risksacademy.com\/\">Risk Academy<\/a><\/li><\/ul><div class=\"nx-table-wrap\"><table class=\"nx-table nx-rd-table\" data-stack=\"true\"><thead><tr><th scope=\"col\">Handoff<\/th><th scope=\"col\">Between<\/th><th scope=\"col\">What crosses, and when<\/th><\/tr><\/thead><tbody><tr data-pillar=\"foundry\"><td><span class=\"nx-rd-code\">F03<\/span><\/td><td>Foundry to Reports<\/td><td>Sealed observations and indicator series behind a profile (closeout).<\/td><\/tr><tr data-pillar=\"universe\"><td><span class=\"nx-rd-code\">F04<\/span><\/td><td>Universe to Reports<\/td><td>After-action and scenario findings for chapters 10 and 13 (after action review).<\/td><\/tr><tr data-pillar=\"foundry\"><td><span class=\"nx-rd-code\">F05<\/span><\/td><td>Foundry to Reports<\/td><td>National Portfolio movement for chapter 11 (after action review).<\/td><\/tr><tr data-pillar=\"standards\"><td><span class=\"nx-rd-code\">Ring<\/span><\/td><td>Nexus Standards to Reports<\/td><td>Nexus Standards: applied in editions.<\/td><\/tr><tr data-pillar=\"standards\"><td><span class=\"nx-rd-code\">F06<\/span><\/td><td>Reports to Nexus Standards<\/td><td>Method and correction findings as change proposals (correction).<\/td><\/tr><tr data-pillar=\"universe\"><td><span class=\"nx-rd-code\">F12<\/span><\/td><td>Reports to Universe<\/td><td>Q4 synthesis informs the next-year mandate (renewal).<\/td><\/tr><tr data-pillar=\"academy\"><td><span class=\"nx-rd-code\">Ring<\/span><\/td><td>Reports to Risk Academy<\/td><td>Risk Academy: taught in the open.<\/td><\/tr><\/tbody><\/table><\/div><\/section><\/div><\/div><\/article><\/div><\/div><div class=\"nrp-noprint\"><section id=\"nx-sec-nr-gateway\" class=\"nx-section\" data-hue=\"systemic\" data-tone=\"alt\" aria-labelledby=\"nx-nr-gateway-h\"><div class=\"nx-container\"><div class=\"nx-section-head\"><div class=\"nx-eyebrow-row\"><span class=\"nx-eyebrow\">Reports<\/span><span class=\"nx-rule\" aria-hidden=\"true\"><\/span><span class=\"nx-eyebrow\">Contribute<\/span><\/div><h2 id=\"nx-nr-gateway-h\" class=\"nx-section-title\">Send evidence or a correction on Global Cyber and Digital Systems.<\/h2><p class=\"nx-lede\">Reports is the Consortium&#8217;s quarterly publication, written by six desks. This page sits with the GCRI <a class=\"nx-link nx-term\" href=\"https:\/\/docs.therisk.global\/organization\/systems\" data-tc=\"Systems\" data-tk=\"Nexus Standards\" data-td=\"The twenty Nexus systems, NXS-CMD to NXS-LAB\">Systems<\/a> Evidence desk. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work. Sent to the wrong desk, it is forwarded, not refused.<\/p><div class=\"nx-chips\"><span class=\"nx-chip\">GCRI Systems Evidence desk<\/span><span class=\"nx-chip\">Global Sector Risk and Resilience<\/span><\/div><\/div><div class=\"nx-section-body\"><ul class=\"nx-dest\"><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/write-to-us\/contact\/\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Email<\/span><span class=\"nx-dest-host\">Gateway GW-GCRI<\/span><\/span><span class=\"nx-dest-title\">Send it from this page<\/span><span class=\"nx-dest-why\">Evidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/open-science\/#nx-sec-zenodo\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Zenodo<\/span><span class=\"nx-dest-host\">Open deposit<\/span><\/span><span class=\"nx-dest-title\">Deposit it and submit to the community<\/span><span class=\"nx-dest-why\">Publish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><li><a class=\"nx-dest-card\" href=\"https:\/\/therisk.global\/nexus-reports\/contribute\/#nx-sec-routing\"><span class=\"nx-dest-top\"><span class=\"nx-dest-rel\">Reports<\/span><span class=\"nx-dest-host\">GCRI<\/span><\/span><span class=\"nx-dest-title\">See which desk takes what you have<\/span><span class=\"nx-dest-why\">The routing table opens the contribution page: what you have, the desk that takes it, how each contribution is reviewed and credited, and the licence.<\/span><span class=\"nx-dest-go\" aria-hidden=\"true\"><svg class=\"nx-arrow\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span><\/a><\/li><\/ul><div class=\"nx-live-slot\" data-nxf-slot=\"contribute\" data-nxf-kind=\"workflow\" data-nxf-resource=\"nexus:\/\/gcri\/nexus-reports\/editions\/gs-13\/full#contribute\" data-nxf-title=\"Contribute evidence\" data-nxf-height=\"480\" hidden><\/div><p class=\"nx-note nx-mt-3\">Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.<\/p><\/div><\/div><\/section><\/div><p class=\"nx-note\" data-nr-rights=\"true\"><a class=\"nx-link\" rel=\"license\" href=\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\">CC BY 4.0<\/a> Free to read. Text and figures: CC BY 4.0. Data: CC0 1.0. Authors keep copyright. Published by GCRI Canada.<\/p><section class=\"nx-section nx-deeper-band\" aria-labelledby=\"nx-deeper-therisk-global-nexus-reports-editions-gs-13-full-h\"><div class=\"nx-container\"><nav class=\"nx-deeper\" aria-labelledby=\"nx-deeper-therisk-global-nexus-reports-editions-gs-13-full-h\" data-nx-deeper=\"3\" data-nx-resources=\"1 1 1\"><h2 class=\"nx-deeper-h\" id=\"nx-deeper-therisk-global-nexus-reports-editions-gs-13-full-h\">Go deeper<\/h2><ul><li><a href=\"https:\/\/docs.therisk.global\/organization\/model\/scenarios\/urban-flood\" data-ext><span class=\"nx-deeper-k\">Documentation:<\/span> Urban flood<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><li><a href=\"https:\/\/risksacademy.com\/risk-science\/risk-information-standards\/\" data-ext><span class=\"nx-deeper-k\">Academy:<\/span> Risk information standards and interoperability<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><li><a href=\"https:\/\/nexustandards.com\/data\/identification-standards\/\" data-ext><span class=\"nx-deeper-k\">Standards:<\/span> Identification (the UNI)<span class=\"nx-deeper-x\" aria-hidden=\"true\">\u2197<\/span><span class=\"nx-deeper-sr\"> (opens another site)<\/span><\/a><\/li><\/ul><\/nav><\/div><\/section><\/div><\/div><script class=\"_iub_cs_skip\">window.__nxMount ? window.__nxMount(document.currentScript) : null;<\/script><style>@media print { @page { margin: 20mm 17mm 20mm 17mm; @top-left { content: \"Nexus Reports\"; font: 500 7.5pt \"IBM Plex Mono\", monospace; color: #4a4a4a; } @top-right { content: \"Nexus Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\\002019 s Cyber and Digital Systems. \\0000b7  Baseline Edition 2026\"; font: 400 7.5pt \"IBM Plex Sans\", sans-serif; color: #4a4a4a; } @bottom-left { content: \"NR-SECTOR-CYBER-GLOBAL-2026-BASELINE \\0000b7  Draft, not released\"; font: 400 7pt \"IBM Plex Mono\", monospace; color: #4a4a4a; } @bottom-center { content: \"CC BY 4.0. Free to read. Authors keep copyright.\"; font: 400 6.5pt \"IBM Plex Sans\", sans-serif; color: #4a4a4a; } @bottom-right { content: counter(page) \" \/ \" counter(pages); font: 500 7.5pt \"IBM Plex Mono\", monospace; color: #000000; } } @page :first { @top-left { content: none; } @top-right { content: none; } } html, body { background: #ffffff; } nexus-header, nexus-footer, #wpadminbar, .site-header, .site-footer, #masthead, #colophon, .sidebar, .widget-area, .comments-area, .post-navigation, .entry-meta, .page-header, .elementor-location-header, .elementor-location-footer, body > header, body > footer { display: none; } .nxe-host { margin: 0; padding: 0; } }<\/style><script>(function () { var D = document; function hosts(f) { var h = D.querySelectorAll(\".nxe-host\"); for (var i = 0; i < h.length; i++) { f(h[i].shadowRoot ? h[i].shadowRoot : h[i]); } } function reveal() { hosts(function (r) { var b = r.querySelectorAll(\"[data-nrp-act][hidden]\"); for (var i = 0; i < b.length; i++) { b[i].hidden = false; } }); } function say(el, t) { var p = el; while (p) { var l = p.querySelector ? p.querySelector(\".nrp-live\") : null; if (l) { l.textContent = t; return; } p = p.parentElement; } } D.addEventListener(\"click\", function (e) { var path = e.composedPath ? e.composedPath() : [e.target]; for (var i = 0; i < path.length; i++) { var el = path[i]; var act = el.getAttribute ? el.getAttribute(\"data-nrp-act\") : null; if (act === \"print\") { window.print(); return; } if (act === \"copy\") { var t = el.getAttribute(\"data-nrp-text\"); if (navigator.clipboard) { navigator.clipboard.writeText(t).then(function () { say(el, \"Copied.\"); }, function () { say(el, \"CLIPBOARD_UNAVAILABLE: select the text and copy it.\"); }); } else { say(el, \"CLIPBOARD_UNAVAILABLE: select the text and copy it.\"); } return; } } }); if (D.readyState === \"loading\") { D.addEventListener(\"DOMContentLoaded\", reveal); } else { reveal(); } addEventListener(\"load\", reveal); setTimeout(reveal, 1500); })();<\/script>\n\n\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Report\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#report\",\"name\":\"Global Cyber and Digital Systems 2026: complete edition\",\"headline\":\"Global Cyber and Digital Systems 2026: complete edition\",\"description\":\"The complete Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.\",\"inLanguage\":\"en\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#webpage\"},\"author\":{\"@id\":\"https:\/\/therisk.global\/#organization\",\"@type\":\"Organization\",\"name\":\"The Global Centre for Risk and Innovation\",\"url\":\"https:\/\/therisk.global\/\",\"alternateName\":\"GCRI\"},\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"isAccessibleForFree\":true,\"creativeWorkStatus\":\"Draft\"}]}<\/script>\n\n<!-- nx-rev:3212da2793d0bee8 -->\n<!-- nx-shared:72c04b39ae9a -->\n<!-- nx-path:\/editions\/gs-13\/full\/ -->","protected":false},"excerpt":{"rendered":"<p>The complete Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":664,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_buddyx_sub_header_visibility":"","_buddyx_sub_header_title_visibility":"","_hide_show_side_panel":"","_buddyxpro_page_sidebar":"","_buddyxpro_page_disable_header":"","_buddyxpro_page_disable_footer":"","_buddyxpro_page_content_width":"","_buddyxpro_page_header_style":"","_buddyxpro_page_color_mode":"","_buddyxpro_page_loader":"","_nx_seo_description":"The complete Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.","_nx_seo_title":"Global Cyber and Digital Systems 2026 | Reports GCRI","_nx_seo_image":"","_nx_seo_jsonld":"{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#webpage\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/\",\"name\":\"Global Cyber and Digital Systems 2026: complete edition\",\"creativeWorkStatus\":\"Draft\",\"description\":\"The complete Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.\",\"inLanguage\":\"en\",\"isPartOf\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/#website\"},\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"breadcrumb\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#breadcrumbs\"}},{\"@type\":\"Report\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#complete\",\"name\":\"Global Cyber and Digital Systems 2026\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/\",\"identifier\":[{\"@type\":\"PropertyValue\",\"propertyID\":\"NR\",\"value\":\"NR-SECTOR-CYBER-GLOBAL-2026-BASELINE-v1.0.0\"},{\"@type\":\"PropertyValue\",\"propertyID\":\"NR-alias\",\"value\":\"NR-SEC-GS-13-2026-BL\"}],\"reportNumber\":\"NR-SECTOR-CYBER-GLOBAL-2026-BASELINE\",\"version\":\"1.0.0\",\"inLanguage\":\"en\",\"license\":\"https:\/\/creativecommons.org\/licenses\/by\/4.0\/\",\"creativeWorkStatus\":\"Draft\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"editor\":{\"@type\":\"Person\",\"name\":\"Saeed Valadbaygi\",\"jobTitle\":\"Chief Steward and Managing Editor\",\"affiliation\":{\"@id\":\"https:\/\/therisk.global\/#organization\"}},\"author\":{\"@id\":\"https:\/\/therisk.global\/#organization\"},\"isPartOf\":{\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/#report\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/#website\",\"url\":\"https:\/\/therisk.global\/nexus-reports\/\",\"name\":\"Reports \u00b7 GCRI\",\"publisher\":{\"@id\":\"https:\/\/therisk.global\/#organization\"}},{\"@type\":\"Organization\",\"@id\":\"https:\/\/therisk.global\/#organization\",\"name\":\"The Global Centre for Risk and Innovation\",\"alternateName\":\"GCRI\",\"url\":\"https:\/\/therisk.global\/\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/#breadcrumbs\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Reports\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Editions: the Reports catalogue\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Global Cyber and digital systems Risk and Resilience Report 2026: Baseline Edition, The State of the World\u2019s Cyber and Digital Systems.\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Global Cyber and Digital Systems 2026: complete edition\",\"item\":\"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/\"}]}]}","_nx_i18n_locale":"","_nx_i18n_group":"","nexus_page_kind":"","footnotes":"","_nrp_robots":"noindex","_nrp_edition":"664","_nx_seo_image_alt":"","_nx_seo_canonical":"https:\/\/therisk.global\/nexus-reports\/editions\/gs-13\/full\/","_nx_seo_robots":"noindex,follow","_nx_seo_schema_type":"Report"},"class_list":["post-1118","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/1118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/comments?post=1118"}],"version-history":[{"count":0,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/1118\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/pages\/664"}],"wp:attachment":[{"href":"https:\/\/therisk.global\/nexus-reports\/wp-json\/wp\/v2\/media?parent=1118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}