世界银行-增强识别（ID）生态系统的网络弹性：关键风险和良好实践缓解措施（英）

September 2025 Public Disclosure AuthorizedPublic Disclosure AuthorizedPublic Disclosure AuthorizedPublic Disclosure Authorized Acknowledgments This note was authored by Ghislain de Salins and Marie Eichholtzer from the World Bank and by Shah Mahmood and Carsten Maple from Warwick University. Feedback and input were provided by Casey Torgusson, Taylor Reynolds, Julia Clark, Christopher Tullis, Audrey Ariss, Giacomo Assenza, Adam Cooper, Clement Gevaudan, and Baidy Sy. The development of this note was enabled by the Cybersecurity Multi-Donor Trust Fund, a development partner-funded World Bank initiative under the broader Digital Development Partnership 2.0 Umbrella Program, aiming to build cybersecurity capacity and strengthen cyber resilience in low- and middle-income countries. The development of this note was also supported by the World Bank Group’s Identification for Development (ID4D) initiative. Disclaimer The intended audience for this note includes policy makers as well as cybersecurity and ID practitioners. It aims to provide technical guidance and support informed decision-making on cybersecurity risk management for digital ID ecosystems. However, the implementation of any recommended cybersecurity measure remains the sole responsibility of governments and organizations. While every effort has been made to ensure the accuracy and relevance of the content, the World Bank does not assume liability for any cybersecurity breaches, losses, or failures that may occur following the adoption of measures described herein. The recommendations are provided on an ‘as-is’ basis and should be adapted to local legal, institutional, and operational contexts. The content is based on the data available at the time of writing and reflects evolving international good practices, including experiences in a wide range of countries from different regions. © 2025 International Bank for Reconstruction and Development / The World Bank 1818 H Street NW, Washington, DC 20433 www.worldbank.org This work is a product of the staff of The World Bank with external contributions. The findings, interpretations, and conclusions expressed in this work do not necessarily reflect the views of The World Bank, its Board of Executive Directors, or the governments they represent. The World Bank does not guarantee the accuracy, completeness, or currency of the data included in this work and does not assume responsibility for any errors, omissions, or discrepancies in the information, or liability with respect to the use of or failure to use the information, methods, processes, or conclusions set forth. The boundaries, colors, denominations, and other information shown on any map in this work do not imply any judgment on the part of The World Bank concerning the legal status of any territory or the endorsement or acceptance of such boundaries. Nothing herein shall constitute or be construed or considered to be a limitation upon or waiver of the privileges and immuni