The level and quality of ICT security management varies across organizations, although most follow ISO 27001 and ISO 9001.
Different levels of capacity for ICT security among different States can increase vulnerability in an interconnected world.