Context: India has jumped to Tier 1 in the Global Cybersecurity Index (GCI) 2024, released by the International Telecommunication Union (ITU), when it comes to role-modelling as part of the country’s cybersecurity commitments and resulting impacts.

Key findings of Global Cybersecurity Index 2024

• India among role model countries: 46 countries (including India) are in Tier 1 i.e., “role modelling" countries demonstrating a strong commitment to all five cybersecurity pillars. 

• Global Improvement in Cybersecurity: Since 2021 (last GCI was published), all regions have shown improvement and Africa has advanced the most on cybersecurity 

• Expansion of digital services: Most countries are either “establishing" (Tier 3) or “evolving" (Tier 4).

• These countries have largely expanded digital services and connectivity but must integrate cybersecurity measures.

• Organizational measures are identified as an area for potential growth.

• India advanced to Tier 1, the highest tier, owing to commitment to all five cybersecurity pillars: legal, technical, capacity development, cooperation, and organizational measures.

• Legal frameworks are noted as the strongest pillar for most countries, with 177 countries having regulations related to personal data protection, privacy protection, or breach notification.

• The majority of countries are either “establishing” (Tier 3) or “evolving” (Tier 4) in terms of cybersecurity maturity.

• These countries are expanding digital services but still need to enhance cybersecurity measures.

• A significant “cybercapacity gap” exists globally, marked by limitations in skills, staffing, equipment, and funding.

• The report identifies significant threats such as ransomware attacks, cyber breaches affecting core industries, system outages, and breaches of privacy.

Key issues

• Worrisome threats: Ransomware attacks, cyber breaches affecting core industries, costly system outages, etc. 

• Prevalence of cybercapacity gap: Limitations in skills, staffing, equipment and funding. 

• Operating cybersecurity framework:  Putting cybersecurity agreements into practical operation remains challenging. 

• Increased ransomware: Rise in reports of ransomware attacks targeting government services and other critical sectors in many countries.

• Breaches affecting core industries: The scale, frequency and intensity of incidents or breaches affecting individuals and sectors like education, manufacturing, energy and IT services.

• Privacy concerns: Data breaches led to General Data Protection Regulation (GDPR) fines issued since 2018 estimated to be currently worth more than EUR 4.5 billion.

• Cost to businesses: The global average cost of a data breach was estimated at USD 4.45 million in 2023.

• Outages: Information technology disruptions affecting the integrity and availability of systems, services and supply chains.

Key Recommendations

• Developing and regularly updating a comprehensive national cybersecurity strategy. 

• Capacity building to cybersecurity professionals, youth and vulnerable groups. 

• Fostering domestic and international cooperation on information-sharing, training opportunities, etc. 

About Global Cybersecurity Index

• The GCI is guided by the ITU Global Cybersecurity Agenda (GCA), which provides a framework for the initiative and sets the strategic direction for global cybersecurity efforts.

• GCI 2024 assesses country-level cybersecurity commitments across five pillars: legal, technical, organizational, capacity development, and cooperation. 

• It uses a new five-tier analysis (Tier 1 to Tier 5) to assess each country's advances with cybersecurity commitments and resulting impacts. 

• This a comprehensive measure developed to assess the commitment and progress of countries in the realm of cybersecurity.

• It evaluates and ranks countries based on their cybersecurity efforts and achievements.

• It aims to raise awareness about the critical importance of cybersecurity and the various dimensions it encompasses.

• The GCI uses a multi-stakeholder approach, integrating input and expertise from various organizations to improve the quality of the assessment and foster international collaboration.

The GCI is structured around five key pillars:

1. Legal Measures: Evaluation of a country’s legal framework related to cybersecurity, including laws and regulations governing cybercrime, data protection, and information security.

2. Technical Measures: Assessment of the technical infrastructure in place, such as cybersecurity technologies, incident response capabilities, and network security measures.

3. Organizational Measures: Examination of organizational structures and processes dedicated to managing cybersecurity, including the establishment of cybersecurity agencies or task forces.

4. Capacity Development: Review of efforts to build and enhance human resources and skills in cybersecurity through training programs, education, and professional development.

5. Cooperation: Analysis of national and international collaboration efforts, including partnerships, information sharing, and participation in global cybersecurity initiatives.

Key Objectives

• Improving Survey Quality: By leveraging diverse expertise and feedback from various stakeholders, the GCI aims to enhance the accuracy and comprehensiveness of the assessment.

• Fostering International Cooperation: The GCI promotes global collaboration and information exchange on cybersecurity issues.

• Promoting Knowledge Exchange: It supports the sharing of best practices and lessons learned among countries to advance global cybersecurity efforts.

About International Telecommunication Union (ITU)

• The ITU is a specialized agency of the United Nations responsible for issues related to information and communication technologies (ICTs).

• The ITU works to foster global collaboration and coordination among member states to address technological challenges, develop international standards.

• This ensures the efficient use of the radio-frequency spectrum and satellite orbits.

Structure and Organization

• The ITU’s headquarters is located in Geneva, Switzerland.

Governing Bodies

• ITU-T (Telecommunication Standardization Sector): Develops international standards for telecommunications and ICTs.

• ITU-R (Radiocommunication Sector): Manages the radio-frequency spectrum and satellite orbits and develops international standards for radiocommunications.

• ITU-D (Telecommunication Development Sector): Focuses on fostering the development of telecommunications and ICTs in developing countries, providing technical assistance and capacity-building.

• Members: It has 193 member states and over 900 sector members, including private companies, international organizations, and academic institutions.

Major Initiatives

• Global Cybersecurity Index (GCI): Assesses countries’ commitment to cybersecurity, providing a benchmark for national progress and improvements.

• Connecting the World: An initiative aimed at increasing global connectivity, particularly in underserved areas.

• World Telecommunication Development Conference (WTDC): A key event where member states discuss and decide on strategies for telecommunication development.