2026 Readiness Index
47/100
Level 2: Developing
Change since last year: new
Source: 2026 survey; free-text answers coded against the workbook criteria
Domain scores
- Governance & Policy2.0 / 5
- Monitoring & Observability2.3 / 5
- Incident Response & CSIRT Capability2.0 / 5
- Routing & DNS Security3.0 / 5
- Trusted Access Services2.3 / 5
- Continuity Planning & Operational Resilience3.3 / 5
- Institutional Coordination1.5 / 5
Top 3 recommended improvements
- Institutional Coordination (1.5/5): Formalise contact with your national CSIRT, join the APCERT Cyber Drill or a regional exercise, and work towards FIRST membership. Regional peers such as APAN can sponsor you.
- Governance & Policy (2.0/5): Get a management-approved information security policy with a named owner, and a yearly documented risk assessment with its own budget line. These cost little and lift the whole benchmark.
- Incident Response & CSIRT Capability (2.0/5): Write a short incident response plan (intake, triage, containment, lessons learned), run one tabletop exercise a year, and get your CSIRT listed with Trusted Introducer.
Public technical checks
Passive checks of public registries by the project team. Other results are self-reported.
1 of 7 verified
Individual check results are not shown for NRENs that take part anonymously, because they could reveal the NREN's identity. See the list of checks.
Show this benchmark on your website
Copy this HTML to embed your 2026 Readiness Benchmark badge.
<a href="https://nrenreadiness.org/results/nren-p"><img src="https://nrenreadiness.org/badge/nren-p/2026" alt="NREN P – APAC NREN Cyber Readiness Benchmark 2026: 47/100" width="300" height="96"></a>