This report synthesises an OECD project to develop a framework and a set of statistical indicators that can be used to assess the digital security (cybersecurity) risk management practices of businesses. A survey instrument aligned with the framework was developed and piloted. After a general...

As societies become increasingly digital, the importance of cyber security has grown significantly for individuals, companies, and nations. The rising number of cyber attacks surpasses the existing defense capabilities, partly due to a shortage of skilled cyber security professionals. This...

In an increasingly digital world, the significance of cyber security for individuals, businesses, and governments has never been greater. Rising cyber attacks are challenging current defence and operational capabilities, highlighting a critical shortage of skilled cyber security professionals....

The OECD Policy Framework on Digital Security charts the economic and social dimension of cybersecurity, highlights the OECD approach to digital security policy and equips policymakers to use OECD digital security Recommendations in developing better policies. The Framework also identifies...

Most digital security incidents are caused by malicious actors (e.g. cybercriminals and state-sponsored groups) exploiting vulnerabilities in organisations’ digital ecosystems. Addressing vulnerabilities before attackers take advantage of them is an effective means of reducing the probability...

This report analyses the latest generation of “national cybersecurity strategies” in ten OECD countries and identifies commonalities and differences. The analysis reveals that cybersecurity policy making has become a national policy priority and relies on holistic strategies supported by...