2020年全球网络安全指数（GCI）报告_172页_4mb

Global Cybersecurity Index 2020 Summary

Core Content

The Global Cybersecurity Index (GCI) is a tool developed by the International Telecommunication Union (ITU) to measure the commitment of 193 ITU Member States and the State of Palestine to cybersecurity. The 2020 edition reflects a more comprehensive and updated understanding of cybersecurity commitments, incorporating changes in the questionnaire and weightage system to better align with evolving global cybersecurity concerns and efforts.

Main Points

• Purpose: The GCI aims to help countries identify areas for improvement, encourage action, and raise awareness about the state of cybersecurity globally.
• Methodology: The Index is based on 82 questions, 20 indicators, and 5 pillars of cybersecurity:
  • Legal measures
  • Technical measures
  • Organizational measures
  • Capacity development measures
  • Cooperation measures
• Data Collection: In 2020, 150 questionnaires were submitted, with 169 country focal points involved. The Index reflects data from 194 countries.
• Score Growth: The median overall score increased by 9.5% since 2018, indicating general improvement in cybersecurity commitments.
• Legal Measures:
  • 167 countries have some form of cybersecurity legislation.
  • 133 countries have data protection regulations.
  • 97 countries have regulations on critical infrastructure.
• Technical Measures:
  • 131 countries have active Computer Incident Response Teams (CIRTs).
  • 104 countries are engaged in regional CIRTs.
  • 101 countries have mechanisms for reporting child online protection.
• Organizational Measures:
  • 127 countries have national cybersecurity strategies (NCS).
  • 136 countries have cybersecurity agencies.
  • 86 countries have child online protection strategies and initiatives.
• Capacity Development Measures:
  • 142 countries conduct cyber-awareness initiatives.
  • 94 countries have cybersecurity R&D programs.
  • 98 countries reported having national cybersecurity industries.
• Cooperation Measures:
  • 166 countries are engaged in cybersecurity Public-Private Partnerships (PPPs).
  • 90 countries have cybersecurity bilateral agreements.
  • 112 countries have cybersecurity multilateral agreements.

Key Findings

• Improvement in Cybersecurity Commitments: All five pillars of the GCI show overall improvement, although regional gaps in cybercapacity persist.
• Legal Frameworks: Many countries have updated their data protection and privacy regulations, but online identity and data theft legislation is still underdeveloped.
• Technical Capabilities: There has been an increase in the deployment of CIRTs/CERTs, indicating a stronger response to cyber incidents.
• Organizational Structures: A significant number of countries have established national cybersecurity strategies and agencies, highlighting a growing recognition of cybersecurity as a strategic priority.
• Capacity Development: Cybersecurity awareness, education, and R&D are being prioritized, with many countries now supporting national cybersecurity industries.
• Cooperation and Partnerships: PPPs and bilateral/multilateral agreements are increasing, showing a trend towards collaborative cybersecurity efforts.

Changes in the Index

• Expanded Participation: The 2020 edition saw a record number of 150 questionnaires submitted, compared to 105 in the previous iteration.
• Questionnaire Updates: Questions were redefined, added, or removed to better reflect current cybersecurity concerns and efforts.
• Weightage Adjustments: Weightages were adjusted based on expert recommendations, which may impact country scores and rankings.
• Data Interpretation: Countries that did not submit responses were analyzed through desk research, but this data is not officially endorsed. Missing elements were interpreted as not found, not as non-existent.

Conclusion

The GCI 2020 highlights the increasing importance of cybersecurity in the context of a rapidly evolving digital world. It underscores the need for capacity building, international cooperation, and legal and technical frameworks to ensure a secure and trusted cyberspace. While many countries are making progress, regional disparities and lack of uniformity in legal definitions remain challenges. The GCI serves as a valuable tool for identifying gaps and promoting best practices in cybersecurity.