The question, exactly as 3,832 people saw it
At work, I report suspicious messages via my organisation's reporting button or phishing mailbox.
I don't know how to do this, or why I should2% The full spread of answers, not just right and wrong. 2% chose "I don't know how to do this, or why I should". That is a group who would do this if they were shown how, which is a different problem from people who know how and skip it. Everyone answered in their own language; the English wording is shown here.
What a participant was told
The feedback shown after answering, verbatim:
Reporting a suspicious message straight away helps your organisation detect and block it before it reaches your colleagues. One quick report can stop a whole attack.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.
Where it is weakest
Share whose own answer puts them at risk, by group. Only groups with enough people and enough organisations appear.
| Group | At risk | People |
|---|
| Education sector | 34% | 329 |
| Other sector | 32% | 352 |
| Insurance sector | 30% | 416 |
| Technology sector | 29% | 428 |
| 2 to 9 size | 29% | 55 |
| 50 to 249 size | 29% | 1,251 |
| Manufacturing sector | 28% | 488 |
| Public sector sector | 28% | 192 |
| Belgium, everyone | 27% | 3,832 |
| 250 or more size | 27% | 1,886 |
| Healthcare sector | 25% | 402 |
| Just me size | 25% | 32 |
| Professional services sector | 23% | 486 |
| Retail sector | 23% | 410 |
| 10 to 49 size | 23% | 608 |
| Financial services sector | 19% | 329 |
