Other

out of 100 · Patchy

21 organisations · 352 responses

The three things the scan measures

What people see

What people do

What people know

Belgium: 55 / 59 / 50, in the same order.

Against Belgium, by topic

Strongest topic	Phishing 2 below the national line
Weakest topic	Internet surfing 6 below the national line

Where other organisations sit

The 16 organisations of the 21 here where at least 5 people have finished, so they have a score of their own.

871

Exposed, 0-49 · 8 organisationsPatchy, 50-69 · 7 organisationsAware, 70-84 · held backResilient, 85-100 · none yetHeld back, 1 organisation

Exposed, 0-49. Safe habits are the exception rather than the rule. What protects this organisation is mostly its technology, not what its people do day to day.

Patchy, 50-69. Good habits exist but they are uneven: strong in some people and some topics, absent in others. A Patchy organisation is not careless, it is unmanaged.

Aware, 70-84. Safe habits are normal for most people most of the time, and the remaining gaps are specific rather than general.

Resilient, 85-100. Safe habits hold up under pressure, including among people who are busy, new, or being rushed by someone else.

Held back. Where fewer than 5 organisations sit in a band we do not give the number, because it would point at particular employers. Those bands are shown together as one segment.

Other by size

The same group, split by how many people the organisation employs.

Just me

–

2 to 9

–

10 to 49

52 50 to 249

52 250 or more

Held back, each needing at least 5 organisations and 20 people: Just me (2 organisations, needs 5), 2 to 9 (3 organisations, needs 5).

Anything held back on the front page stays held back here.

Every question, for Other

Share of people whose own answer puts them at risk, or who got the knowledge question wrong. Lower is better in both columns. Each question opens its own page.

Question	Here	Belgium	Difference
Confidential information left in the open	7%	7%	0 level
A colleague's unlocked screen	5%	6%	1 better
A password written down	7%	7%	0 level
Confidential files sent unprotected	6%	6%	0 level
Company information on social media	7%	7%	0 level
Work sent from a private account	5%	6%	1 better
Checking links before clicking	27%	26%	1 worse
Reporting suspicious messages	32%	27%	5 worse
Multi-factor authentication	21%	16%	5 worse
Password reuse	30%	24%	6 worse
Anonymising before using AI tools	32%	26%	6 worse
Working from a public place	25%	23%	2 worse
Forwarding work files to a personal account	6%	6%	0 level
Family or friends using a work device	3%	6%	3 better
Trusted app stores	29%	25%	4 worse
Challenging an unknown visitor	33%	26%	7 worse
Backing up critical data	37%	26%	11 worse
Reviewing who has access	30%	26%	4 worse
Sharing files the approved way	33%	25%	8 worse
Checking AI answers	29%	25%	4 worse
Phone number spoofing	46%	43%	3 worse
Phishing from real accounts	48%	44%	4 worse
Reading a link	61%	60%	1 worse
Spotting the real domain	61%	56%	5 worse
A computer that may be infected	64%	56%	8 worse
What HTTPS does	55%	50%	5 worse
AI chat history	49%	43%	6 worse
Internal or confidential	60%	56%	4 worse
An unexpected MFA prompt	46%	43%	3 worse
After denying a prompt	51%	51%	0 level

Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand