These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium, 2025. A published edition: these figures are frozen and will not change.
Every figure here has at least 20 people from 5 different organisations behind it. How this works
Enough people. A figure appears only if at least 20 people answered behind it.
Enough organisations. And only if those people came from at least 5 different organisations.
Never a person, never one employer. Every figure is a group average. Nothing on any page shows one person's answers or one named organisation's score.
Anything held back is listed at the foot of this page with the reason. Those answers still count towards the national figure; it is the breakdown we hold back, never the answers. When one group in a list is held back, its average could in principle be worked out by subtracting the others from the national figure. We accept that: a group average names no person and no organisation.

National score ›

Belgium
55
out of 100
Patchy
Three quarters is what people do and know, with doing counting for more. The last quarter is what they see around them at work.

Participating organisations ›

262
192 of them have reached 5 people, so they have a score of their own.

Completed scans ›

3,832
people, each answering all 30 questions.

The three things the scan measures

Out of 100.
What people see
55What people do
59What people know
50
What people see around them is a quarter of the national score, because it measures the workplace. A person’s own score never counts it: nobody is marked down for a colleague.

Where Belgian organisations sit

The 192 organisations with a score of their own. Click a band to see what it means.
Exposed, 0-49. Safe habits are the exception rather than the rule. What protects this organisation is mostly its technology, not what its people do day to day.
Patchy, 50-69. Good habits exist but they are uneven: strong in some people and some topics, absent in others. A Patchy organisation is not careless, it is unmanaged.
Aware, 70-84. Safe habits are normal for most people most of the time, and the remaining gaps are specific rather than general.
Resilient, 85-100. Safe habits hold up under pressure, including among people who are busy, new, or being rushed by someone else.
Held back. Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.
Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.

By sector

Average score out of 100.
Financial services
58Professional services
56Insurance
56Education
53Healthcare
55Manufacturing
55Retail
58Technology
54Public sector
56Other
53

By organisation size

Average score out of 100.
Just me
562 to 9
5510 to 49
5650 to 249
55250 or more
55

By language

Average score out of 100.
English
55
Dutch
55
French
55
By language, not by region. It says nothing about Flanders, Wallonia or Brussels.

Where the country is strong and weak, by topic

The eight subjects the thirty questions cover. Each ring is 25 points.
Data protection (6)Phishing (6)Password security (5)Safe surfing and AI (4)Account segregation (3)Physical security (3)Internet surfing (2)Phone security (1)
Belgium, all sectors
Financial services, strongest sector
Other, weakest sector
Subjects contain between one and six questions each. Compare the shapes against each other, not one subject against another.

What people do not do

Share of people whose own answer puts them at risk
Reporting suspicious messages
27%Anonymising before using AI tools
26%Challenging an unknown visitor
26%Backing up critical data
26%Reviewing who has access
26%Checking links before clicking
26%Trusted app stores
25%
Scale to 50%.

What people do not know

Share who got the knowledge question wrong
Reading a link
60%Spotting the real domain
56%A computer that may be infected
56%Internal or confidential
56%After denying a prompt
51%What HTTPS does
50%Phishing from real accounts
44%

How to cite this edition

Cyber Security Coalition, Cyber Behaviour Benchmark Belgium, 2025 edition. Retrieved from https://benchmark.psybersafe.com/coalition/benchmark/2025
Demonstration edition, published 30 August 2026. A response counts towards the year it was completed in.
This edition is frozen. Its figures will not change, and this address will not be reused. If an error is found, a correction is published here beside the original figure, showing what changed and why, with both left visible.

Editions

Each edition covers twelve months and keeps its own permanent address.
EditionAddressStatus
2025
demonstration		https://benchmark.psybersafe.com/coalition/benchmark/2025Published
2026
the live view		https://benchmark.psybersafe.com/coalition/benchmark/2026In progress
2027https://benchmark.psybersafe.com/coalition/benchmark/2027Early 2028
An edition covers a full twelve months, so it is published after the year it covers has ended. It is frozen on the day a named person publishes it and is never edited afterwards. The live view is not an edition and is not for quoting.

What is being held back

What was held back when this edition was published, and why. A figure held back in one year can publish in the next, once more organisations take part.
Held backBehind itWhy
22 of 50 cellsgrid cellsSplitting by sector and by size together makes fifty small groups. In 2 of them it is organisations that are missing, not people.
Change over timeNothing to compare against until a second edition publishes.
These answers still count towards the national figure. We are holding back the breakdown, not throwing anything away.