The question, exactly as 2,719 people saw it
At work, I report suspicious messages via my organisation's reporting button or phishing mailbox.
I don't know how to do this, or why I should2% The full spread of answers, not just right and wrong. 2% chose "I don't know how to do this, or why I should". That is a group who would do this if they were shown how, which is a different problem from people who know how and skip it. Everyone answered in their own language; the English wording is shown here.
What a participant was told
The feedback shown after answering, verbatim:
Reporting a suspicious message straight away helps your organisation detect and block it before it reaches your colleagues. One quick report can stop a whole attack.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.
Where it is weakest
Share whose own answer puts them at risk, by group. Only groups with enough people and enough organisations appear.
| Group | At risk | People |
|---|
| Healthcare sector | 22% | 221 |
| Education sector | 17% | 326 |
| 250 or more size | 16% | 1,204 |
| Insurance sector | 15% | 200 |
| 2 to 9 size | 15% | 34 |
| Belgium, everyone | 14% | 2,719 |
| Financial services sector | 14% | 354 |
| Professional services sector | 14% | 389 |
| Other sector | 14% | 237 |
| 10 to 49 size | 14% | 659 |
| Technology sector | 13% | 355 |
| Retail sector | 12% | 226 |
| 50 to 249 size | 12% | 803 |
| Manufacturing sector | 10% | 319 |
| Public sector sector | 9% | 92 |
1 group held back: Just me. They are named rather than left out, so you can tell the difference between still gathering and never measured.
