CMM Reviews Around the World
Since 2015, the GCSCC and its partners* conducted more than 172 CMM reviews in over 96 nations
*Commonwealth Telecommunications Organisation (CTO), Global Forum on Cyber Expertise (GFCE), International Telecommunication Union (ITU), Organization of American States (OAS), World Bank (WB), NRD Cyber Security (NRD), Norwegian Institute of International Affairs (NUPI), Cybersecurity Capacity Centre for Southern Africa (C3SA), Oceania Cyber Security Centre (OCSC)
| Country | First Review | Second Review | Third Review | Fourth Review |
| Albania | 2018 GCSCC & World Bank Country Report | |||
| Antigua and Barbuda | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Argentina | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Armenia | 2015 GCSCC & World Bank | |||
| Bahamas | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | 2021 GCSCC, OAS, ITU | |
| Bangladesh | 2018 GCSCC & NRD CS Country Report | |||
| Barbados | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Belize | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Benin | 2020 World Bank | |||
| Bhutan | 2015 GCSCC & World Bank Country Report | |||
| Bolivia | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Bosnia and Herzegovina | 2018 GCSCC & World Bank Country Report | |||
| Botswana | 2019 World Bank | |||
| Brazil | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB | 2023 GCSCC Country Report | |
| Burkina Faso | 2019 World Bank | |||
| Cambodia | 2023 JICA & GCSCC | |||
| Cameroon | 2019 World Bank | |||
| Cape Verde | 2019 World Bank Country Report | |||
| Chad | 2021 C3SA & ITU | |||
| Chile | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Colombia | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Cook Islands | 2021 OCSC | |||
| Costa Rica | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | 2024 GCSCC & FCDO | |
| Cote d'Ivoire | 2019 World Bank | |||
| Cyprus | 2017 | 2021 GCSCC Country Report | ||
| Dominica | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Dominican Republic | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Ecuador | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | 2020 NRD CS | 2022 World Bank Country Report |
| El Salvador | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Eswatini | 2017 CTO & ITU | |||
| Fiji | 2015 GCSCC &CTO | 2024 OCSC | ||
| Gambia, The | 2018 GCSCC & World Bank Country Report | |||
| Georgia | 2018 GCSCC, NRD CS & FCDO | |||
| Ghana | 2018 GCSCC, NUPI & World Bank | |||
| Grenada | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Guatemala | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Guyana | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Haiti | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | 2023 GCSCC & World Bank | |
| Honduras | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Iceland | 2017 GCSCC Country Report | |||
| Indonesia | 2015 GCSCC Country Report | |||
| Iraq | 2022 GCSCC & NATO | |||
| Ivory Coast | 2019 World bank | |||
| Jamaica | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Kiribati | 2019 OCSC | |||
| Kosovo | 2015 GCSCC & World Bank Country Report | 2019 GCSCC & World Bank Country Report | ||
| Kuwait | 2025 GCSCC & FCDO | |||
| Kyrgyz Republic | 2017 GCSCC & World Bank Country Report | |||
| Lesotho | 2017 World Bank & GCSCC | 2022 C3SA Country report | ||
| Liberia | 2020 World Bank | |||
| Lithuania | 2017 GCSCC Country Report | |||
| Libya | 2023 GCSCC | |||
| Madagascar | 2016 GCSCC & ITU Country Report | |||
| Malawi | 2016 CTO | 2020 World Bank | ||
| Mauritius | 2019 World Bank & GCSCC | |||
| Mexico | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Federated States of Micronesia | 2020 OCSC | |||
| Mongolia | 2024 | |||
| Montenegro | 2015 GCSCC & World Bank | 2021 World Bank | ||
| Morocco | 2021 GCSCC & UK Home Office | |||
| Mozambique | 2016 CTO | |||
| Myanmar | 2018 GCSCC & World Bank | |||
| Namibia | 2019 World Bank | |||
| Nauru | 2022 OCSC | |||
| Nicaragua | 2016 OAS & IDB Regional Study Report | 2020 OAS and IDB Regional Study Report | ||
| Niger | 2019 World Bank | |||
| Nigeria | 2019 GCSCC Report available on request | |||
| North Macedonia | 2018 GCSCC & World Bank Country Report | |||
| Panama | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Papua New Guinea | 2019 OCSC & ITU | |||
| Paraguay | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Peru | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Rwanda | 2017 CTO | 2022 NRD CS & UK Home Office | ||
| Saint Kitts and Nevis | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Saint Lucia | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Saint Vincent and Grenadines | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Samoa | 2018 GCSCC, OCSC & ITU Country Report | |||
| Senegal | 2016 GCSCC & NL Country Report | |||
| Serbia | 2019 World bank Country Report | |||
| Seychelles | 2023 C3SA & World Bank | |||
| Sierra Leone | 2016 GCSCC & ITU Country Report | |||
| Somalia | 2021 C3SA & World Bank | |||
| Sri Lanka | 2019 GCSCC & World Bank | |||
| Suriname | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Switzerland | 2019 GCSCC Country Report | |||
| Tanzania | 2016 CTO | |||
| Thailand | 2016 GCSCC & ITU | |||
| Tonga | 2018 GCSCC, OCSC &ITU | |||
| Trinidad and Tobago | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Tunisia | 2019 GCSCC & GIZ | |||
| Tuvalu | 2021 OCSC | |||
| Uganda | 2015 GCSCC Country Report | 2020 C3SA | ||
| United Kingdom | 2015 GCSCC Country Report | |||
| Uruguay | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Vanatu | 2019 OCSC & ITU | |||
| Venezuela | 2016 OAS & IDB Regional Study Report | 2020 OAS & IDB Regional Study Report | ||
| Zambia | 2017 GCSCC & World Bank |
Regional Reports
| Country | First Review | Second Review | Third Review |
| Latin America and Caribbean Regional Reports | 2016 | 2020 | OAS & IDB In Process |
| Cybersecurity Capacity Maturity Report for Countries in the Southern African Development Community (SADC) | 2021 C3SA | ||
| Cybersecurity Capacity in the Western Balkans | 2021 World Bank |
If you are interested in a CMM, how it deployed and how the countries are using the report and its recommendations, please contact us: cybercapacity@cs.ox.ac.uk
This list is subject to change as our partners and we continue to deploy the CMM around the world. Please check this website for updates or follow us on LinkedIn.
Status: June 2025