Financial services

out of 100 · Patchy

25 organisations · 329 responses

The three things the scan measures

What people see

What people do

What people know

Belgium: 55 / 59 / 50, in the same order.

Against Belgium, by topic

Strongest topic	Internet surfing 6 above the national line
Weakest topic	Account segregation level with the national line

Where financial services organisations sit

The 18 organisations of the 25 here where at least 5 people have finished, so they have a score of their own.

126

Exposed, 0-49 · held backPatchy, 50-69 · 12 organisationsAware, 70-84 · held backResilient, 85-100 · none yetHeld back, 6 organisations

Exposed, 0-49. Safe habits are the exception rather than the rule. What protects this organisation is mostly its technology, not what its people do day to day.

Patchy, 50-69. Good habits exist but they are uneven: strong in some people and some topics, absent in others. A Patchy organisation is not careless, it is unmanaged.

Aware, 70-84. Safe habits are normal for most people most of the time, and the remaining gaps are specific rather than general.

Resilient, 85-100. Safe habits hold up under pressure, including among people who are busy, new, or being rushed by someone else.

Held back. Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.

Financial services by size

The same group, split by how many people the organisation employs.

Just me

–

2 to 9

–

10 to 49

52 50 to 249

59 250 or more

Held back, each needing at least 5 organisations and 20 people: Just me (3 organisations, needs 5), 2 to 9 (3 organisations, needs 5).

Anything held back on the front page stays held back here.

Every question, for Financial services

Share of people whose own answer puts them at risk, or who got the knowledge question wrong. Lower is better in both columns. Each question opens its own page.

Question	Here	Belgium	Difference
Confidential information left in the open	9%	7%	2 worse
A colleague's unlocked screen	7%	6%	1 worse
A password written down	9%	7%	2 worse
Confidential files sent unprotected	5%	6%	1 better
Company information on social media	8%	7%	1 worse
Work sent from a private account	8%	6%	2 worse
Checking links before clicking	21%	26%	5 better
Reporting suspicious messages	19%	27%	8 better
Multi-factor authentication	15%	16%	1 better
Password reuse	17%	24%	7 better
Anonymising before using AI tools	22%	26%	4 better
Working from a public place	22%	23%	1 better
Forwarding work files to a personal account	7%	6%	1 worse
Family or friends using a work device	7%	6%	1 worse
Trusted app stores	17%	25%	8 better
Challenging an unknown visitor	21%	26%	5 better
Backing up critical data	19%	26%	7 better
Reviewing who has access	24%	26%	2 better
Sharing files the approved way	22%	25%	3 better
Checking AI answers	19%	25%	6 better
Phone number spoofing	43%	43%	0 level
Phishing from real accounts	37%	44%	7 better
Reading a link	52%	60%	8 better
Spotting the real domain	50%	56%	6 better
A computer that may be infected	49%	56%	7 better
What HTTPS does	46%	50%	4 better
AI chat history	37%	43%	6 better
Internal or confidential	51%	56%	5 better
An unexpected MFA prompt	44%	43%	1 worse
After denying a prompt	50%	51%	1 better

Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand