The Cybersecurity Capacity Maturity Model for Nations (CMM) 2021 Edition, revised by the Global Cyber Security Capacity Centre (GCSCC), builds upon the success of the first and second editions, which were deployed since 2015 through cooperation with GCSCC’s strategic partners: Organization of American States (OAS), World Bank, Commonwealth Telecommunications Organisation (CTO), International Telecommunication Union (ITU) and the Global Forum on Cyber Expertise (GFCE), and its two regional partners, the Oceania Cyber Security Centre (OCSC) and the Cybersecurity Capacity Centre for Southern Africa (C3SA). Through these partnerships, the CMM has been deployed more than 120 times in over 85 countries, including Albania, Brazil, Nigeria, Samoa, Switzerland, Uganda, and UK, and underpinned two regional studies in Latin America and the Caribbean through collaboration with the OAS.
The revisions in the CMM 2021 Edition respond to the constantly changing and evolving nature of cybersecurity capacity and the developments in the field. The GCSCC undertook a global collaborative exercise aimed at extracting and synthesising the community’s latest knowledge. It developed change proposals based on lessons learnt from CMM deployments, and undertook a series of online and offline consultations with experts, to validate the findings and discuss the changes. Those who were consulted included the GCSCC Expert Advisory Panel, strategic, regional and implementation partners of the GCSCC, and other experts from academia, international and regional organisations, governments, the private sector, and civil society.
The GCSCC’s effort to improve the CMM in collaboration with its partners is an ongoing exercise as they continue to deploy the model across the world with their partners this year. The new lessons learnt will be used to further improve the model. Their aim is to ensure the CMM remains applicable to all national contexts and reflects the fast-changing state of cybersecurity capacity maturity in the different regions across the globe.
The Oxford Martin School at the University of Oxford is a world-leading centre of pioneering research that addresses global challenges. Their community of more than 200 researchers, from Oxford and beyond, are working to address the most pressing global challenges and opportunities of the 21st century. The Global Cyber Security Capacity Centre (GCSCC) is a leading international centre for research on efficient and effective cybersecurity capacity-building, promoting an increase in the scale, pace, quality and impact of cybersecurity capacity-building initiatives across the world.