These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium. This is the live view: it changes as people complete the scan, so it is not for quoting.

Education

57
out of 100 · Patchy
15 organisations · 326 responses

The three things the scan measures

What people see
56
What people do
63
What people know
49
Belgium: 56 / 65 / 53, in the same order.

Against Belgium, by topic

Strongest topicData protection 1 below the national line
Weakest topicInternet surfing 4 below the national line

Where education organisations sit

The 12 organisations of the 15 here where at least 5 people have finished, so they have a score of their own.
Exposed, 0-49. Safe habits are the exception rather than the rule. What protects this organisation is mostly its technology, not what its people do day to day.
Patchy, 50-69. Good habits exist but they are uneven: strong in some people and some topics, absent in others. A Patchy organisation is not careless, it is unmanaged.
Aware, 70-84. Safe habits are normal for most people most of the time, and the remaining gaps are specific rather than general.
Resilient, 85-100. Safe habits hold up under pressure, including among people who are busy, new, or being rushed by someone else.
Held back. Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.

Education by size

The same group, split by how many people the organisation employs.
Just me
–
2 to 9
–
10 to 49
–
50 to 249
62
250 or more
–
Held back, each needing at least 5 organisations and 20 people: Just me (1 organisation, needs 5), 2 to 9 (1 organisation, needs 5), 10 to 49 (3 organisations, needs 5), 250 or more (3 organisations, needs 5).
Anything held back on the front page stays held back here.

Every question, for Education

Share of people whose own answer puts them at risk, or who got the knowledge question wrong. Lower is better in both columns. Each question opens its own page.
QuestionHereBelgiumDifference
Confidential information left in the open7%7%0 level
A colleague's unlocked screen8%6%2 worse
A password written down7%8%1 better
Confidential files sent unprotected7%7%0 level
Company information on social media5%7%2 better
Work sent from a private account7%8%1 better
Checking links before clicking14%14%0 level
Reporting suspicious messages17%14%3 worse
Multi-factor authentication8%10%2 better
Password reuse20%13%7 worse
Anonymising before using AI tools17%14%3 worse
Working from a public place22%17%5 worse
Forwarding work files to a personal account6%7%1 better
Family or friends using a work device6%6%0 level
Trusted app stores15%12%3 worse
Challenging an unknown visitor16%14%2 worse
Backing up critical data18%16%2 worse
Reviewing who has access21%14%7 worse
Sharing files the approved way15%14%1 worse
Checking AI answers15%13%2 worse
Phone number spoofing41%39%2 worse
Phishing from real accounts41%40%1 worse
Reading a link62%58%4 worse
Spotting the real domain62%53%9 worse
A computer that may be infected55%54%1 worse
What HTTPS does53%47%6 worse
AI chat history41%39%2 worse
Internal or confidential59%55%4 worse
An unexpected MFA prompt43%40%3 worse
After denying a prompt50%48%2 worse
Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand