# GCyEO zero-frame triage v20.15

Prepared: 15 September 2026. Baseline: frozen global snapshot v20.7, 29 August 2026. This is a *triage of evidence frames*, not a new country census, a recoding exercise or a change to the 20 frozen zero counts. Source for all 20 rows: `app/data/countries.json`; wave reports in `research/outputs/` provide additional context where present. Only the Syria signal below was newly checked against a live official site in this pass.

## What the 20 zeros mean

All 20 rows have a source-check date in the frozen ledger. The date says when GCyEO checked the described frame; it does not guarantee that every underlying catalogue was itself current or complete. A zero means that no qualifying *independent credential* was counted in that frame at the snapshot cut-off. Adjacent computing courses, training signals, proposed awards, offshore provision and a college named for cybersecurity have different evidentiary status.

| ISO3 | Jurisdiction | Frozen frame / boundary | Triage action |
|---|---|---|---|
| FSM | Micronesia | 2025–26 COM-FSM catalogue; broad ICT and non-credential capacity excluded | Routine catalogue-cycle refresh; retain toponym checks |
| PLW | Palau | Maintained PCC 2024–28 catalogue; adjacent supply observed | Routine catalogue-cycle refresh; exclude false geography |
| FRO | Faroe Islands | University course/degree surface and national strategy | Check whether strategic cyber field becomes a named award |
| MCO | Monaco | Government local-provider boundary and IUM portfolio | Recheck local award identities, not French-directed study |
| SMR | San Marino | UNIRSM 2026–27 portfolio and recognition/training boundary | Routine portfolio-cycle refresh |
| ATG | Antigua and Barbuda | UWI Five Islands, Antigua State College and ministry scope | Routine current-portfolio refresh |
| ABW | Aruba | University of Aruba 2026–27 degree resources | Routine current-portfolio refresh |
| BHS | Bahamas | University of The Bahamas current programme lists | Routine current-portfolio refresh |
| VGB | British Virgin Islands | HLSCC programme list; professional cyber training separated | Recheck whether training gains an independent credential |
| CYM | Cayman Islands | UCCI BSc Computing; cyber course/career content separated | Routine award-identity refresh |
| CUW | Curaçao | University of Curaçao BEST degree; cyber career area separated | Routine award-identity refresh |
| DMA | Dominica | Dominica State College and public tertiary scope | Improve programme-level frame before stronger empty-frame language |
| MAF | Saint-Martin, French part | Directed search of limited local tertiary scope | Reconcile local versus French/offshore award register |
| SYR | Syria | Named cyber college/institute but no credential counted at cut-off | **Immediate**: reconcile newly public bachelor/diploma labels and admission against credential identities and operation |
| BMU | Bermuda | Local IT/progression scope; frozen citation includes a 2021–22 catalogue | Obtain current catalogue and recheck local-versus-US award boundary |
| MDV | Maldives | MNU degree and MQA regulator portfolio; security modules separated | Routine programme-cycle refresh |
| CAF | Central African Republic | Official cyber training mention; no programme fields in institution frame | **Immediate**: locate award title, level, provider and operational state |
| GNQ | Equatorial Guinea | UNGE computing degree and higher-education statistics; false offshore result excluded | Routine multilingual catalogue refresh |
| GNB | Guinea-Bissau | National qualification plus recent higher-education inventory; no resolved cyber award | Recheck qualification/provider mapping in next frame |
| MRT | Mauritania | Joint cyber master described as preparation; embedded teaching excluded | **Immediate**: verify launch, credential identity and local delivery before recount |

## Dated Syria source check

On 15 September 2026, the [Syrian University for Security Sciences homepage](https://suss.edu.sy/en/) labelled a cyber-security college as “Bachelor” and a cyber-security technical institute as “Technical diploma.” Its [2026–27 admission guide](https://suss.edu.sy/en/admission/) describes an application competition for both paths, including separate thresholds; the guide itself warns that applying is not admission. These are two **public credential-level signals**, not two new GCyEO rows. The first-publication date of these labels, matriculation, curriculum delivery, award identity and completion evidence were not established in this check. The frozen Syria `public_record_count` remains 0, and the candidate-layer total remains 7,167 until a successor data release records row identities, changed counts, evidence URLs, dates and checksums.

The [university's Arabic announcement of the 2026–27 paths](https://suss.edu.sy/news/%D8%A7%D9%84%D8%AC%D8%A7%D9%85%D8%B9%D8%A9-%D8%A7%D9%84%D8%B3%D9%88%D8%B1%D9%8A%D8%A9-%D9%84%D9%84%D8%B9%D9%84%D9%88%D9%85-%D8%A7%D9%84%D8%A3%D9%85%D9%86%D9%8A%D8%A9-%D8%AA%D8%B9%D9%84%D9%86/) also describes a four-year academic path and a two-year technical path, but graduation ranks are not substituted for academic award names in GCyEO. These pages share one institutional source; they are not independent validation.

## Change-control conclusion

Triage urgency is not a confidence score and does not rank national education. Three positive trajectories (SYR, CAF, MRT) need identity/temporal resolution first; dated or narrow frames (especially BMU, MAF and DMA) need frame improvement; the remaining zeros warrant source-cycle maintenance. None of these actions requires the independent human coder, but none satisfies that publication gate either. Future live overlays must continue to cite their own check date and must never silently replace frozen v20.7 values.