These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium. This is the live view: it changes as people complete the scan, so it is not for quoting.

Manufacturing

55
out of 100 · Patchy
33 organisations · 488 responses

The three things the scan measures

What people see
54
What people do
58
What people know
50
Belgium: 55 / 59 / 50, in the same order.

Against Belgium, by topic

Strongest topicPhishing 1 above the national line
Weakest topicPhone security 2 below the national line

Where manufacturing organisations sit

The 24 organisations of the 33 here where at least 5 people have finished, so they have a score of their own.
Exposed, 0-49. Safe habits are the exception rather than the rule. What protects this organisation is mostly its technology, not what its people do day to day.
Patchy, 50-69. Good habits exist but they are uneven: strong in some people and some topics, absent in others. A Patchy organisation is not careless, it is unmanaged.
Aware, 70-84. Safe habits are normal for most people most of the time, and the remaining gaps are specific rather than general.
Resilient, 85-100. Safe habits hold up under pressure, including among people who are busy, new, or being rushed by someone else.
Held back. Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.

Manufacturing by size

The same group, split by how many people the organisation employs.
Just me
–
2 to 9
–
10 to 49
61
50 to 249
48
250 or more
57
Held back, each needing at least 5 organisations and 20 people: Just me (4 organisations, needs 5), 2 to 9 (4 organisations, needs 5).
Anything held back on the front page stays held back here.

Every question, for Manufacturing

Share of people whose own answer puts them at risk, or who got the knowledge question wrong. Lower is better in both columns. Each question opens its own page.
QuestionHereBelgiumDifference
Confidential information left in the open8%7%1 worse
A colleague's unlocked screen7%6%1 worse
A password written down7%7%0 level
Confidential files sent unprotected7%6%1 worse
Company information on social media7%7%0 level
Work sent from a private account6%6%0 level
Checking links before clicking28%26%2 worse
Reporting suspicious messages28%27%1 worse
Multi-factor authentication15%16%1 better
Password reuse24%24%0 level
Anonymising before using AI tools25%26%1 better
Working from a public place23%23%0 level
Forwarding work files to a personal account7%6%1 worse
Family or friends using a work device7%6%1 worse
Trusted app stores29%25%4 worse
Challenging an unknown visitor27%26%1 worse
Backing up critical data28%26%2 worse
Reviewing who has access23%26%3 better
Sharing files the approved way24%25%1 better
Checking AI answers27%25%2 worse
Phone number spoofing38%43%5 better
Phishing from real accounts41%44%3 better
Reading a link62%60%2 worse
Spotting the real domain56%56%0 level
A computer that may be infected59%56%3 worse
What HTTPS does50%50%0 level
AI chat history44%43%1 worse
Internal or confidential58%56%2 worse
An unexpected MFA prompt44%43%1 worse
After denying a prompt47%51%4 better
Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand