A whitepaper just released by Microsoft linking cybersecurity policy and performance shows “significant differences in security outcomes between countries” that have, for example, signed or ratified the Convention on Cybercrime:

“We found that countries adopting or implementing certain policies, including international treaties like the Council of Europe Convention on Cybercrime … are more likely to over-perform on a key cybersecurity metric compared to countries that have not adopted the same policies.”

• Whitepaper "Linking Cybersecurity Policy and Performance"