Cybersecurity Governance, Research Activity, and Vulnerability Exposure: measurement instrument, analysis pipeline and released results

Data and analysis pipeline supporting a cross-industry study of cybersecurity governance emphasis, research activity and vulnerability exposure across 98 capabilities, 66 standards and 8 industries. The deposit holds the two researcher-authored matrices (standard-to-capability weights W, standard-to-industry relevance R), both legs of the CWE-to-capability mapping chain, the blind inter-coder reliability instruments and all three coders' returns, the source workbooks, the complete 30-stage analysis pipeline with its four build-failing verification gates, and every generated result including the per-CVE routing table behind the exposure measure. A clean-room run from the declared seed reproduces every output file byte-identically. DEPOSIT_CONTENTS.md inside the archive lists what is included and states what was deliberately left out and why. SUPPLEMENTARY_MATERIAL.md is also provided as a loose file: it holds the mapping-chain external validation, per-industry alignment columns, composite sensitivity across formulations and cluster rules, claim-level provenance for 39 claims, and full temporal-class results.