The question, exactly as 2,719 people saw it
What should you do if you receive a multi-factor authentication prompt you did not initiate for a private account?
The full spread of answers, not just right and wrong. 20% chose "I don't know", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.
What a participant was told
The feedback shown after answering, verbatim:
An unexpected multi-factor authentication prompt usually means someone else has your password and is trying to sign in. Denying the request stops them getting in at that moment.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.
Where it is weakest
Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
| Group | Answer wrong | People |
|---|
| Healthcare sector | 49% | 221 |
| Technology sector | 47% | 355 |
| Financial services sector | 44% | 354 |
| Education sector | 43% | 326 |
| 250 or more size | 43% | 1,204 |
| Belgium, everyone | 40% | 2,719 |
| 10 to 49 size | 40% | 659 |
| Insurance sector | 39% | 200 |
| Other sector | 39% | 237 |
| 50 to 249 size | 37% | 803 |
| Professional services sector | 35% | 389 |
| Retail sector | 35% | 226 |
| 2 to 9 size | 35% | 34 |
| Manufacturing sector | 34% | 319 |
| Public sector sector | 29% | 92 |
1 group held back: Just me. They are named rather than left out, so you can tell the difference between still gathering and never measured.
