2026 Readiness Index
45/100
Level 2: Developing
Change since last year: new
Source: 2026 survey; free-text answers coded against the workbook criteria
Domain scores
- Governance & Policy2.0 / 5
- Monitoring & Observability2.7 / 5
- Incident Response & CSIRT Capability2.3 / 5
- Routing & DNS Security3.0 / 5
- Trusted Access Services2.7 / 5
- Continuity Planning & Operational Resilience1.7 / 5
- Institutional Coordination1.5 / 5
Top 3 recommended improvements
- Institutional Coordination (1.5/5): Formalise contact with your national CSIRT, join the APCERT Cyber Drill or a regional exercise, and work towards FIRST membership. Regional peers such as APAN can sponsor you.
- Continuity Planning & Operational Resilience (1.7/5): List your critical services with a recovery time target for each, write a one-page continuity plan with a named crisis team, and test restoring from backup at least once a year.
- Governance & Policy (2.0/5): Get a management-approved information security policy with a named owner, and a yearly documented risk assessment with its own budget line. These cost little and lift the whole benchmark.
Public technical checks
Passive checks of public registries by the project team. Other results are self-reported.
2 of 7 verified
Individual check results are not shown for NRENs that take part anonymously, because they could reveal the NREN's identity. See the list of checks.
Show this benchmark on your website
Copy this HTML to embed your 2026 Readiness Benchmark badge.
<a href="https://nrenreadiness.org/results/nren-z"><img src="https://nrenreadiness.org/badge/nren-z/2026" alt="NREN Z – APAC NREN Cyber Readiness Benchmark 2026: 45/100" width="300" height="96"></a>