These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium. This is the live view: it changes as people complete the scan, so it is not for quoting.

The question, exactly as 3,832 people saw it

Which of the following document types would be considered internal, rather than confidential or sensitive?
Your organisation's organigram correct
44%
Customer account numbers
14%
Encryption keys used for production systems
15%
Unpublished financial reports
14%
I don't know
14%
The full spread of answers, not just right and wrong. 14% chose "I don't know", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.

What a participant was told

The feedback shown after answering, verbatim:
An organigram is typically classified as internal: it describes structure and roles but contains no sensitive personal, financial or security-critical data. The other options would cause real damage if exposed.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.

Where it is weakest

Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
GroupAnswer wrongPeople
Just me size62%32
Other sector60%352
Technology sector59%428
Manufacturing sector58%488
Healthcare sector57%402
250 or more size57%1,886
Belgium, everyone56%3,832
Professional services sector56%486
Education sector56%329
Public sector sector56%192
50 to 249 size56%1,251
Insurance sector55%416
10 to 49 size55%608
Retail sector54%410
2 to 9 size53%55
Financial services sector51%329
Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand