The world relies on a secure and stable Internet, including the services and applications offered over it. As malicious actors—individual, corporate, and state— increasingly attack the Internet and any infrastructure accessible from it, there is increasing scrutiny on the reliability and resiliency of Internet services at all levels.
Measurements can play an important role in demonstrating the actual state of Internet infrastructure security, the progress industry and individual actors are making in securing the Internet, and in stimulating laggers to catch up.
At the Internet Integrity Workshop II — “Measurement for Action,” held on October 20, 2025, as a parallel session to the RIPE 91 meeting in Bucharest, Romania, we asked four key questions:
- How do we know what progress is being made?
- What should be measured and shared?
- How can measurements stimulate actions by individual players aimed at improvements in key areas?
- How can we make sure progress is seen and recognized?
Participants focused on the role of metrics and key performance indicators in assessing Internet resilience, correlating the deployment of best practices with real-world risk reduction, and presenting data in ways that motivate improvement rather than passive compliance.
A recurring theme emerged: data alone does not create change, but well-designed, transparent, and relevant measurement can align incentives, support accountability, and strengthen community-driven norms.
This report captures the key insights, debates, and next steps from the workshop. It is intended for anyone working to improve Internet integrity who wants to better understand how measurement can become a practical tool for reducing risk and building a more secure, resilient Internet.
