The question, exactly as 2,719 people saw it
Which of the following document types would be considered internal, rather than confidential or sensitive?
Your organisation's organigram correct45% Customer account numbers15% Encryption keys used for production systems14% Unpublished financial reports14% The full spread of answers, not just right and wrong. 12% chose "I don't know", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.
What a participant was told
The feedback shown after answering, verbatim:
An organigram is typically classified as internal: it describes structure and roles but contains no sensitive personal, financial or security-critical data. The other options would cause real damage if exposed.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.
Where it is weakest
Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
| Group | Answer wrong | People |
|---|
| Healthcare sector | 64% | 221 |
| Technology sector | 60% | 355 |
| Education sector | 59% | 326 |
| 250 or more size | 59% | 1,204 |
| Professional services sector | 58% | 389 |
| Belgium, everyone | 55% | 2,719 |
| Financial services sector | 55% | 354 |
| 10 to 49 size | 55% | 659 |
| Insurance sector | 54% | 200 |
| Other sector | 52% | 237 |
| 50 to 249 size | 51% | 803 |
| Manufacturing sector | 48% | 319 |
| Retail sector | 46% | 226 |
| Public sector sector | 46% | 92 |
| 2 to 9 size | 32% | 34 |
1 group held back: Just me. They are named rather than left out, so you can tell the difference between still gathering and never measured.
