National Security Scorecard
Keep military, border, cyber, infrastructure, energy, food/water, emergency, health, supply, industry and continuity dimensions visible rather than hiding them in one number.
Define where this capability matters and what must continue.
Record the relevant national, state, district or local geography; affected population; responsible authority and operator; critical function; upstream and downstream dependencies; maximum tolerable disruption; alternative route; and safe publication level.
National Resilience Data, Map & Scorecard. Its effects may cross defence, governance, digital, energy, water, food, health, transport, industry, jobs, education and community resilience.
Start with consequence, exposure and service failure.
Keep military, border, cyber, infrastructure, energy, food/water, emergency, health, supply, industry and continuity dimensions visible rather than hiding them in one number.
National averages hide place-level vulnerability and infrastructure interdependence.
A public map can help decisions but can also expose security-sensitive details.
State what could fail, who or what is exposed, the plausible consequence, current control, evidence strength and unresolved uncertainty—without publishing sensitive operational detail.
Test technical, institutional, supply, workforce and lifecycle causes.
Inconsistent geography and definitions
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Missing asset relationships
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
No data classification model
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Composite scores used without uncertainty
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Use evidence appropriate to the claim and its security class.
| Claim | Minimum evidence | Publication rule |
|---|---|---|
| Capacity exists | Inventory, trained people, maintenance and current availability | Aggregate sensitive assets |
| System is ready | Exercise or operational test against a stated objective | Publish method and finding, not exploitable detail |
| Intervention worked | Baseline, comparator where feasible, outcome, cost and unintended effects | Show uncertainty and independent review |
Evidence contractDefinition · geography · function · period · source · method · owner · uncertainty · verification · access classification.
National Resilience Data, Map & Scorecard
See risk, readiness and recovery capacity from national to critical-asset level while protecting sensitive information.
National Security Scorecard
Keep military, border, cyber, infrastructure, energy, food/water, emergency, health, supply, industry and continuity dimensions visible rather than hiding them in one number.
The operating chain should identify prevention, detection or monitoring where lawful, trained people, infrastructure, information, command, logistics, backup, response, recovery, maintenance, audit, correction and learning.
Choose proportionate action that can be maintained and tested.
Use a versioned location and asset registry.
Separate public, restricted and classified views.
Show dimension, source, period and uncertainty for every score.
Use maps to route investigation, not declare certainty.
Protect urgent functions, pilot safely and transform verified gaps.
Define and protect
Confirm the function, consequence, owner, immediate exposure, current backup, response route and legal boundary.
Diagnose and design
Map dependencies, evidence gaps, failure modes, alternatives, maintenance, workforce, cost and safe evaluation.
Bounded pilot
Build a public-safe district resilience map using aggregated service areas, separate risk dimensions and no precise sensitive-asset locations.
Evaluate and transform
Scale only after independent review of performance, resilience benefit, rights, lifecycle viability and unintended consequences.
Track real capability and service continuity—not activity alone.
Preserve rights, oversight and operational security.
- RiskSensitive location disclosureLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RiskFalse precisionLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RiskColour-only risk communicationLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RequiredCivilian and democratic oversight, due process, privacy, non-discrimination and proportionalitySecurity objectives do not remove legal and constitutional responsibilities.
- RequiredPublic-safe evidence and controlled operational detailNever crowdsource or publish exploitable vulnerability information.