Geopolitical Cyber Risk
Index (GCRI)
Next Peak developed the GCRI to provide global clients with a multi-dimensional view of cyber risks across country-level jurisdictions. The GCRI translates qualitative intelligence into measurable risk to support strategic decision-making and can customize country profiles based on client organizations' sectors, country of origin, operations, and more.
Enterprise Risk in Numbers
AI Regulations
$40 million
The EU AI Act — the world's first comprehensive AI law — carries fines up to $40 million or 7% of global revenue for banned uses, with major provisions taking effect August 2, 2026.
Cyberattacks
2.6M attempts a day
Taiwan — home to 60% of the world’s chips — absorbs 2.6 million intrusion attempts daily; the UAE faces up to 700,000.
Incident Cost
$2.6 billion
Jaguar Land Rover’s ransomware attack halted production for a month — Britain’s most economically damaging cyber incident.
Methodology
The GCRI is built from 48 indicators across 36 countries. The indicators draw from 40+ authoritative sources — including the Lowy Cyber Capabilities index, the International Telecommunication Union (ITU), the National Cyber Security Index (NCSI), the Oxford Cybercrime Index, Freedom House, the Global Peace Index, and Stanford's AI Index — subject-matter expert insights, and the ICR team analytical review.
The Index creates a geo-cyber risk profile of every country by assessing four categories:
01 State Cyber Risk
To what extent a host or foreign government uses offensive cyber, espionage, regulatory mandates, and control over infrastructure, AI, and data to disrupt or coerce organizations operating in the country.
02 Criminal Cyber Risk
How prevalent cybercrime is — malware, ransomware, data theft, scams — and how well local enforcement, anti-corruption, and AML environments contain it.
03 Socioeconomic & Geopolitical Risk
Exposure to instability from economic fragility, inequality, restricted civil liberties, sanctions, and volatile geopolitics.
04 Commercial Capabilities & Cyber Literacy Gaps
Maturity level of local business, infrastructure, education, and R&D regarding cyber defense and security.
Benchmark your exposure
Use the GCRI to understand, analyze and stress-test your supply chain, subsidiaries, and target markets against the state, criminal, and geopolitical threats they actually face.