The question, exactly as 3,832 people saw it
What should you do if you receive a multi-factor authentication prompt you did not initiate for a private account?
The full spread of answers, not just right and wrong. 22% chose "I don't know", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.
What a participant was told
The feedback shown after answering, verbatim:
An unexpected multi-factor authentication prompt usually means someone else has your password and is trying to sign in. Denying the request stops them getting in at that moment.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.
Where it is weakest
Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
| Group | Answer wrong | People |
|---|
| Education sector | 50% | 329 |
| Just me size | 50% | 32 |
| Technology sector | 46% | 428 |
| Other sector | 46% | 352 |
| 2 to 9 size | 45% | 55 |
| Financial services sector | 44% | 329 |
| Manufacturing sector | 44% | 488 |
| 50 to 249 size | 44% | 1,251 |
| Belgium, everyone | 43% | 3,832 |
| Healthcare sector | 43% | 402 |
| 10 to 49 size | 43% | 608 |
| 250 or more size | 43% | 1,886 |
| Professional services sector | 42% | 486 |
| Insurance sector | 41% | 416 |
| Retail sector | 40% | 410 |
| Public sector sector | 35% | 192 |
