Results by Autonomous Community ICT in companies with 10 or more employees (2025 or first quarter of 2026) by activity sector (CNAE-25 section C-O, excl. L; and group 951) and size of the company

ICT Security

Units:Percentage

Select values to consult
- Autonomous communities and cities
  Values that contain
  
  Selected:20
  
  Total:20
- Main variables
  Values that contain
  
  Selected:1
  
  Total:20
- Activity grouping
  Values that contain
  
  Selected:1
  
  Total:4

Choose format of the table

	Activity grouping
Autonomous communities and cities Main variables	.	.	.
	.	.	.
	.	.	.

Decimals to show:

Notes
- 1) The codes at the beginning of each subparagraph refer to the corresponding questionnaire question or the section from which they have been derived
  2) Main variables:
  3) (0) Percentage of the total number of companies with an Internet connection
  4) (1) Percentage of the total number of companies that apply ICT security measures
  5) (2) Percentage of the total number of companies that make their employees aware of ICT security measures
  6) (4) Percentage of the total number of companies that have suffered an ICT security incident

Total: 0seriesy 0cells

Source:INational Statistics Institute

National total
Andalucía
Aragón
Asturias, Principado de
Balears, Illes
Canarias
Cantabria
Castilla y León
Castilla-La Mancha
Cataluña
Comunitat Valenciana
Extremadura
Galicia
Madrid, Comunidad de
Murcia, Región de
Navarra, Comunidad Foral de
País Vasco
Rioja, La
Ceuta
Melilla

F.1 % of companies that apply some ICT security measure (0)
F.1.A % of companies that apply strong password authentication as an ICT security measure (1)
F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1)
F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1)
F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1)
F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1)
F.1.F % of companies that apply network access control as an ICT security measure (1)
F.1.G % of companies that apply VPN as an ICT security measure (1)
F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1)
F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1)
F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1)
F.1.K % of companies that carry out ICT security tests as an ICT security measure (1)
F.2 % of companies that make their employees aware of their ICT security obligations (1)
F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2)
F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2)
F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2)
F.3 % of companies that experienced an ICT security incident (0)
F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4)
F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4)
F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4)