ABSTRACT The developing world stands to gain the most from harnessing the information revolution and AI breakthroughs. However, a lack of cybersecurity capabilities hinders sustainable development. This paper introduces PROGRESS (Promoting Global Resilience for Sectors), a Cyber-Capability Maturity Model (CCMM) designed to scale up cyber resilience. PROGRESS enables modelling complex Socio-Technical-Economic Systems (STES) by considering four functional constituents: essential service providers, sectoral regulators, IT/OT supply chains, and state-grade agencies. Drawing on complex systems theory, over two decades of experience in Critical Infrastructure Protection (CIP), and established cybersecurity frameworks, this model transcends the limitations of single-organization approaches. Working with the World Bank, we applied PROGRESS to large-scale development projects in 11 diverse emerging and low-income economies in Africa and Asia. Fieldwork within critical infrastructure sectors - energy, healthcare, digital infrastructure, and financial services - resulted in tailored, actionable recommendations to mature specific cybersecurity capabilities being implemented. Furthermore, the World Bank has published its Sectoral Cybersecurity Maturity Model (SCMM), which draws upon PROGRESS. Theoretical and empirical evidence supports the application of a comprehensive sectoral approach to build resilience at scale in developing and advanced economies.
Read full abstract