Most digital security incidents are caused by malicious actors (e.g. cybercriminals and state-sponsored groups) exploiting vulnerabilities in organisations’ digital ecosystems. Addressing vulnerabilities before attackers take advantage of them is an effective means of reducing the probability...

This report synthesises an OECD project to develop a framework and a set of statistical indicators that can be used to assess the digital security (cybersecurity) risk management practices of businesses. A survey instrument aligned with the framework was developed and piloted. After a general...

As societies become increasingly digital, the importance of cyber security has grown significantly for individuals, companies, and nations. The rising number of cyber attacks surpasses the existing defense capabilities, partly due to a shortage of skilled cyber security professionals. This...

The OECD Policy Framework on Digital Security charts the economic and social dimension of cybersecurity, highlights the OECD approach to digital security policy and equips policymakers to use OECD digital security Recommendations in developing better policies. The Framework also identifies...

In an increasingly digital world, the significance of cyber security for individuals, businesses, and governments has never been greater. Rising cyber attacks are challenging current defence and operational capabilities, highlighting a critical shortage of skilled cyber security professionals....

Measuring the various aspects of cybersecurity across countries is challenging, in part because the actors in the cybersecurity ecosystem often do not have the incentives to share key data. At the same time, people, firms and governments need to feel secure to communicate online and use...