Grouping of activity (CNAE-25 section C-O, excl. L and group 951) Main variables Company size Total Total Companies F.1 % of companies that apply some ICT security measure (0) Total 91,25 Total Companies F.1 % of companies that apply some ICT security measure (0) From 10 to 49 90,04 Total Companies F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,17 Total Companies F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,11 Total Companies F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 91,36 Total Companies F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 90,24 Total Companies F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 95,39 Total Companies F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,02 Total Companies F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 22,36 Total Companies F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 19,47 Total Companies F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 31,69 Total Companies F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 46,41 Total Companies F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 43,5 Total Companies F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 38,27 Total Companies F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 61,07 Total Companies F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 83,88 Total Companies F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 40,32 Total Companies F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 35,32 Total Companies F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 56,87 Total Companies F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 79,99 Total Companies F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 90,41 Total Companies F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 89,28 Total Companies F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 94,62 Total Companies F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,3 Total Companies F.1.F % of companies that apply network access control as an ICT security measure (1) Total 71,49 Total Companies F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 67,63 Total Companies F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 86,05 Total Companies F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 94,48 Total Companies F.1.G % of companies that apply VPN as an ICT security measure (1) Total 53,44 Total Companies F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 47,54 Total Companies F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 74,84 Total Companies F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 92,18 Total Companies F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 41,7 Total Companies F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 35,88 Total Companies F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 61,56 Total Companies F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 85,54 Total Companies F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 40,13 Total Companies F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 34,02 Total Companies F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 60,97 Total Companies F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 85,89 Total Companies F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 33,18 Total Companies F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 27,16 Total Companies F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 53,53 Total Companies F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 79,35 Total Companies F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 36,87 Total Companies F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 30,99 Total Companies F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 56,83 Total Companies F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 81,49 Total Companies F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 72,73 Total Companies F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 69,82 Total Companies F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 83,08 Total Companies F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 92,98 Total Companies F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 76,44 Total Companies F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 73,45 Total Companies F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 84,95 Total Companies F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 93,68 Total Companies F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 55,02 Total Companies F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 51,84 Total Companies F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 61,9 Total Companies F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 81,52 Total Companies F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 47,79 Total Companies F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 45,07 Total Companies F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 54,77 Total Companies F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 66,28 Total Companies F.3 % of companies that experienced an ICT security incident (0) Total 5,98 Total Companies F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 5,18 Total Companies F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 8,67 Total Companies F.3 % of companies that experienced an ICT security incident (0) From 250 and up 13,51 Total Companies F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 55,16 Total Companies F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 53,85 Total Companies F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 56,01 Total Companies F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 64,93 Total Companies F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 43,69 Total Companies F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 43,02 Total Companies F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 46,86 Total Companies F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 40,96 Total Companies F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 46,72 Total Companies F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 48,9 Total Companies F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 37,55 Total Companies F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 52,37 1. Total Industry (CNAE 10-39) F.1 % of companies that apply some ICT security measure (0) Total 92,87 1. Total Industry (CNAE 10-39) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 91,71 1. Total Industry (CNAE 10-39) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,52 1. Total Industry (CNAE 10-39) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,77 1. Total Industry (CNAE 10-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 90,85 1. Total Industry (CNAE 10-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 89,31 1. Total Industry (CNAE 10-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 95,36 1. Total Industry (CNAE 10-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,46 1. Total Industry (CNAE 10-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 20,98 1. Total Industry (CNAE 10-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 18,18 1. Total Industry (CNAE 10-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 26,98 1. Total Industry (CNAE 10-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 45,43 1. Total Industry (CNAE 10-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 39,84 1. Total Industry (CNAE 10-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 31,47 1. Total Industry (CNAE 10-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 63,95 1. Total Industry (CNAE 10-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 88,67 1. Total Industry (CNAE 10-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 37,44 1. Total Industry (CNAE 10-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 30,48 1. Total Industry (CNAE 10-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 56,03 1. Total Industry (CNAE 10-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 83,68 1. Total Industry (CNAE 10-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 92,39 1. Total Industry (CNAE 10-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 91,15 1. Total Industry (CNAE 10-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 96,61 1. Total Industry (CNAE 10-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,06 1. Total Industry (CNAE 10-39) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 73,49 1. Total Industry (CNAE 10-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 68,56 1. Total Industry (CNAE 10-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 89,36 1. Total Industry (CNAE 10-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 95,6 1. Total Industry (CNAE 10-39) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 53,86 1. Total Industry (CNAE 10-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 45,26 1. Total Industry (CNAE 10-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 80,55 1. Total Industry (CNAE 10-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 96,59 1. Total Industry (CNAE 10-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 40,78 1. Total Industry (CNAE 10-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 32,79 1. Total Industry (CNAE 10-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 63,19 1. Total Industry (CNAE 10-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 89,89 1. Total Industry (CNAE 10-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 38,32 1. Total Industry (CNAE 10-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 29,51 1. Total Industry (CNAE 10-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 63,77 1. Total Industry (CNAE 10-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 89,39 1. Total Industry (CNAE 10-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 31,75 1. Total Industry (CNAE 10-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 23,61 1. Total Industry (CNAE 10-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 54,33 1. Total Industry (CNAE 10-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 82,71 1. Total Industry (CNAE 10-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 35,1 1. Total Industry (CNAE 10-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 26,89 1. Total Industry (CNAE 10-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 58,21 1. Total Industry (CNAE 10-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 85,25 1. Total Industry (CNAE 10-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 69,79 1. Total Industry (CNAE 10-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 65,34 1. Total Industry (CNAE 10-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 82,69 1. Total Industry (CNAE 10-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 95,43 1. Total Industry (CNAE 10-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 76,53 1. Total Industry (CNAE 10-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 72,45 1. Total Industry (CNAE 10-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 85,18 1. Total Industry (CNAE 10-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 94,89 1. Total Industry (CNAE 10-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 50,54 1. Total Industry (CNAE 10-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 45,4 1. Total Industry (CNAE 10-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 58,63 1. Total Industry (CNAE 10-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 83,26 1. Total Industry (CNAE 10-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 45,33 1. Total Industry (CNAE 10-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 42,15 1. Total Industry (CNAE 10-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 51,02 1. Total Industry (CNAE 10-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 63,3 1. Total Industry (CNAE 10-39) F.3 % of companies that experienced an ICT security incident (0) Total 5,93 1. Total Industry (CNAE 10-39) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 4,96 1. Total Industry (CNAE 10-39) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,08 1. Total Industry (CNAE 10-39) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 11,41 1. Total Industry (CNAE 10-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 54,99 1. Total Industry (CNAE 10-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 54,56 1. Total Industry (CNAE 10-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 54,9 1. Total Industry (CNAE 10-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 58,78 1. Total Industry (CNAE 10-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 54,75 1. Total Industry (CNAE 10-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 59,35 1. Total Industry (CNAE 10-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 46,77 1. Total Industry (CNAE 10-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 43,18 1. Total Industry (CNAE 10-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 43,56 1. Total Industry (CNAE 10-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 46,95 1. Total Industry (CNAE 10-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 31,91 1. Total Industry (CNAE 10-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 53,65 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1 % of companies that apply some ICT security measure (0) Total 91,13 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 89,9 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 95,96 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,75 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 90,6 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 89,73 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 93,07 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 19,84 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 17,9 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 24,57 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 41,72 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 35,67 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 28,83 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 59,84 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 83,06 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 34,08 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 28,65 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 51,61 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 78,31 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 88,79 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 87,41 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 94,9 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 93,28 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 68,41 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 63,51 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 88,46 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 91,57 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 47,05 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 40,12 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 71,87 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 93,77 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 36,7 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 29,51 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 62,05 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 86,79 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 31,18 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 23,8 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 56,96 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 83,55 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 27,7 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 21,43 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 48,28 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 77,48 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 30,22 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 23,48 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 54,18 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 76,39 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 64,72 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 60,87 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 77,31 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 95,51 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 75,46 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 71,44 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 86,41 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 94,05 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 49,55 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 46,18 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 54,94 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 77,25 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 42,95 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 39,93 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 49,17 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 63,39 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3 % of companies that experienced an ICT security incident (0) Total 5,41 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 4,3 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 10,12 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 11,79 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 50,08 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 52,1 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 41,86 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 62,02 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 48,9 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 53,82 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 39,88 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 39,17 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 38 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 38,04 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 36,96 1.1. Food, beverages, tobacco, textile industry, clothing, leather and footwear manufacturing, wood and cork industry, paper industry, and graphic arts and reproduction of engraved media (CNAE 10-18) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 41,28 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1 % of companies that apply some ICT security measure (0) Total 93,73 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 91,81 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 97,66 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1 % of companies that apply some ICT security measure (0) From 250 and up 100 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 90,4 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 87,9 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 94,68 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,66 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 21,9 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 16,43 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 29,75 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 47,18 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 44,43 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 29,34 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 72,37 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 93,46 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 46,7 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 36,05 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 64,56 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 87,44 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 95,82 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 94,45 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 98,64 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 99,32 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 79,84 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 73,24 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 92,96 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 98,3 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 62,31 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 49,75 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 86,84 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 98,98 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 46,53 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 32,31 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 72,82 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 92,87 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 46,57 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 31,85 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 73,59 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 95,25 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 38,52 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 24,03 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 64,16 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 89,53 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 42,33 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 27,18 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 69,96 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 92,93 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 73,46 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 65,15 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 89,41 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 98,64 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 82,05 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 78,71 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 84,91 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 94,15 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 56,13 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 46,55 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 64,6 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 90,02 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 46,96 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 40,91 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 52,77 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 66,99 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3 % of companies that experienced an ICT security incident (0) Total 4,92 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 3,45 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 8,89 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 6,45 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 70,8 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 68,24 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 75,44 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 63,16 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 57,23 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 51,81 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 67,96 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 36,84 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 37,95 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 52,28 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 17,99 1.2. Coke plants and petroleum refining, chemical industry, manufacture of pharmaceutical products, manufacture of rubber and plastic products, and manufacture of non-metallic mineral products (CNAE 19-23) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 52,63 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1 % of companies that apply some ICT security measure (0) Total 92,27 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 91,34 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,54 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,21 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 90,06 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 88,45 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 97,19 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 100 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 20,01 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 18,23 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 26,93 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 37,79 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 36,57 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 30,79 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 60,15 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 86,24 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 28,26 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 23,46 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 45,73 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 83,2 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 94,79 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 94,36 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 96,3 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 100 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 72,37 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 69,63 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 83,32 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 97,6 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 49,05 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 41,42 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 82,77 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 97,6 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 33,45 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 27,67 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 55,89 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 90,4 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 31,26 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 25,41 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 54,12 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 88 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 25,77 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 19,62 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 50,42 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 81,29 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 31,48 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 25,49 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 56,08 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 82,09 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 69,58 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 67,44 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 77,47 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 93,6 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 72,82 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 69,48 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 84,93 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 92,14 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 44,51 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 41,04 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 54,33 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 79,49 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 44,99 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 44,13 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 46,87 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 56,76 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3 % of companies that experienced an ICT security incident (0) Total 4,1 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 3,93 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 3,14 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 16,98 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 47,82 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 49,12 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 31,77 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 56,09 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 63,3 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 63,67 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 66,49 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 56,09 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 48,03 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 50,85 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 19,89 1.3. Metallurgy and manufacture of metal products (CNAE 24-25) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 57,93 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1 % of companies that apply some ICT security measure (0) Total 95,09 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 94,42 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,53 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1 % of companies that apply some ICT security measure (0) From 250 and up 100 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 91,51 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 89,31 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 98,01 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,72 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 20,64 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 17,07 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 27,31 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 48,87 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 43,29 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 34,36 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 65,31 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 93,25 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 40,21 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 32,04 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 59,76 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 88,3 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 93,79 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 92,68 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 96,83 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 98,86 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 75,86 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 70,42 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 91,35 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 98,3 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 58,8 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 49,84 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 83,78 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 98,02 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 44,89 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 37,8 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 60,47 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 91,92 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 46,39 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 37,71 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 68,62 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 91,79 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 35,69 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 27,31 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 55,94 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 84,33 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 39,17 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 31,66 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 54,93 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 91,65 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 74,16 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 69,64 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 86,45 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 95,21 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 75,18 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 70,86 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 82,79 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 96,14 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 50,66 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 46,13 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 54,7 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 86,3 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 47,73 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 44,44 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 54,16 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 61,63 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3 % of companies that experienced an ICT security incident (0) Total 7,96 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 6,9 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 11,4 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 11,19 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 57,63 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 58,06 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 56,24 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 59,08 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 54,96 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 63,23 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 39,56 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 35,87 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 42,81 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 45,19 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 34,49 1.4. Computer, electronic and optical products, manufacture of electrical material and equipment, manufacture of machinery and mechanical equipment, manufacture of motor vehicles and other transport material, manufacture of furniture, other manufacturing industries, and repair, maintenance and installation of machinery and equipment (CNAE 26-33) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 53,01 1.5. Energy, gas, steam and water (CNAE 35-39) F.1 % of companies that apply some ICT security measure (0) Total 94,7 1.5. Energy, gas, steam and water (CNAE 35-39) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 93,99 1.5. Energy, gas, steam and water (CNAE 35-39) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 95,93 1.5. Energy, gas, steam and water (CNAE 35-39) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,15 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 93,14 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 92,6 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 93,09 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,14 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 30,02 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 28,3 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 29,09 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 51,56 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 50,22 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 43,73 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 62,71 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 84,57 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 53,03 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 48,22 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 62,05 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 79,21 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 92,91 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 91,1 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 98,68 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 95,71 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 82,95 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 80,26 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 89,78 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 92,28 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 69,8 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 63,46 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 84,9 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 94,86 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 57,85 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 52,22 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 69,16 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 86,28 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 50,9 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 41,96 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 71,31 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 88,85 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 42,75 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 35,42 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 57,35 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 80,07 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 42,24 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 33,59 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 61,54 1.5. Energy, gas, steam and water (CNAE 35-39) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 80,28 1.5. Energy, gas, steam and water (CNAE 35-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 74,54 1.5. Energy, gas, steam and water (CNAE 35-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 70,05 1.5. Energy, gas, steam and water (CNAE 35-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 86,13 1.5. Energy, gas, steam and water (CNAE 35-39) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 89,71 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 85,48 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 82,14 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 90,81 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 99,04 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 59,62 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 50,06 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 81,08 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 80,89 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 45,29 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 41,39 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 50,01 1.5. Energy, gas, steam and water (CNAE 35-39) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 65,35 1.5. Energy, gas, steam and water (CNAE 35-39) F.3 % of companies that experienced an ICT security incident (0) Total 9,23 1.5. Energy, gas, steam and water (CNAE 35-39) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 8,41 1.5. Energy, gas, steam and water (CNAE 35-39) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,72 1.5. Energy, gas, steam and water (CNAE 35-39) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 17,23 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 54,01 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 47,89 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 76,89 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 49,34 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 60,2 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 65,3 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 43,99 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 59,21 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 67,14 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 72,94 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 40,38 1.5. Energy, gas, steam and water (CNAE 35-39) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 80,26 2. Total Construction (CNAE 41-43) F.1 % of companies that apply some ICT security measure (0) Total 87,71 2. Total Construction (CNAE 41-43) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 86,92 2. Total Construction (CNAE 41-43) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 94,31 2. Total Construction (CNAE 41-43) F.1 % of companies that apply some ICT security measure (0) From 250 and up 98,74 2. Total Construction (CNAE 41-43) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 88,1 2. Total Construction (CNAE 41-43) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 87,58 2. Total Construction (CNAE 41-43) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 91,63 2. Total Construction (CNAE 41-43) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,36 2. Total Construction (CNAE 41-43) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 18,41 2. Total Construction (CNAE 41-43) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 17,49 2. Total Construction (CNAE 41-43) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 24,41 2. Total Construction (CNAE 41-43) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 42,53 2. Total Construction (CNAE 41-43) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 34,3 2. Total Construction (CNAE 41-43) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 32,65 2. Total Construction (CNAE 41-43) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 44,7 2. Total Construction (CNAE 41-43) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 80,79 2. Total Construction (CNAE 41-43) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 29,64 2. Total Construction (CNAE 41-43) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 28,09 2. Total Construction (CNAE 41-43) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 38,89 2. Total Construction (CNAE 41-43) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 78,87 2. Total Construction (CNAE 41-43) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 87,69 2. Total Construction (CNAE 41-43) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 86,87 2. Total Construction (CNAE 41-43) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 93,94 2. Total Construction (CNAE 41-43) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 98,72 2. Total Construction (CNAE 41-43) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 55,55 2. Total Construction (CNAE 41-43) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 52,43 2. Total Construction (CNAE 41-43) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 79,22 2. Total Construction (CNAE 41-43) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 98,08 2. Total Construction (CNAE 41-43) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 33,69 2. Total Construction (CNAE 41-43) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 30,56 2. Total Construction (CNAE 41-43) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 55,96 2. Total Construction (CNAE 41-43) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 91,68 2. Total Construction (CNAE 41-43) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 26,11 2. Total Construction (CNAE 41-43) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 23,14 2. Total Construction (CNAE 41-43) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 47 2. Total Construction (CNAE 41-43) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 84,63 2. Total Construction (CNAE 41-43) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 24,63 2. Total Construction (CNAE 41-43) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 21,84 2. Total Construction (CNAE 41-43) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 43,46 2. Total Construction (CNAE 41-43) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 88,48 2. Total Construction (CNAE 41-43) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 18,5 2. Total Construction (CNAE 41-43) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 16,38 2. Total Construction (CNAE 41-43) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 31,96 2. Total Construction (CNAE 41-43) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 76,95 2. Total Construction (CNAE 41-43) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 21,42 2. Total Construction (CNAE 41-43) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 19,47 2. Total Construction (CNAE 41-43) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 33,55 2. Total Construction (CNAE 41-43) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 78,87 2. Total Construction (CNAE 41-43) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 64,51 2. Total Construction (CNAE 41-43) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 63,58 2. Total Construction (CNAE 41-43) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 69,94 2. Total Construction (CNAE 41-43) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 95,52 2. Total Construction (CNAE 41-43) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 70,61 2. Total Construction (CNAE 41-43) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 69,28 2. Total Construction (CNAE 41-43) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 78,33 2. Total Construction (CNAE 41-43) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 94,64 2. Total Construction (CNAE 41-43) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 54,97 2. Total Construction (CNAE 41-43) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 54,94 2. Total Construction (CNAE 41-43) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 52,16 2. Total Construction (CNAE 41-43) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 80,56 2. Total Construction (CNAE 41-43) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 42,58 2. Total Construction (CNAE 41-43) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 40,16 2. Total Construction (CNAE 41-43) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 58,53 2. Total Construction (CNAE 41-43) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 70,89 2. Total Construction (CNAE 41-43) F.3 % of companies that experienced an ICT security incident (0) Total 3,95 2. Total Construction (CNAE 41-43) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 3,45 2. Total Construction (CNAE 41-43) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 7,79 2. Total Construction (CNAE 41-43) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 14,39 2. Total Construction (CNAE 41-43) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 51,44 2. Total Construction (CNAE 41-43) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 56,97 2. Total Construction (CNAE 41-43) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 26,61 2. Total Construction (CNAE 41-43) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 61,52 2. Total Construction (CNAE 41-43) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 51,53 2. Total Construction (CNAE 41-43) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 51,34 2. Total Construction (CNAE 41-43) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 54,85 2. Total Construction (CNAE 41-43) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 35,15 2. Total Construction (CNAE 41-43) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 42,55 2. Total Construction (CNAE 41-43) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 46,52 2. Total Construction (CNAE 41-43) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 25,12 2. Total Construction (CNAE 41-43) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 47,27 3. Total Services (CNAE 46-82, excl. 64-66) F.1 % of companies that apply some ICT security measure (0) Total 91,53 3. Total Services (CNAE 46-82, excl. 64-66) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 90,29 3. Total Services (CNAE 46-82, excl. 64-66) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,31 3. Total Services (CNAE 46-82, excl. 64-66) F.1 % of companies that apply some ICT security measure (0) From 250 and up 98,84 3. Total Services (CNAE 46-82, excl. 64-66) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 92,38 3. Total Services (CNAE 46-82, excl. 64-66) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 91,33 3. Total Services (CNAE 46-82, excl. 64-66) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 95,98 3. Total Services (CNAE 46-82, excl. 64-66) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 98,8 3. Total Services (CNAE 46-82, excl. 64-66) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 23,89 3. Total Services (CNAE 46-82, excl. 64-66) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 20,51 3. Total Services (CNAE 46-82, excl. 64-66) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 34,89 3. Total Services (CNAE 46-82, excl. 64-66) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 47,07 3. Total Services (CNAE 46-82, excl. 64-66) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 47,23 3. Total Services (CNAE 46-82, excl. 64-66) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 42,45 3. Total Services (CNAE 46-82, excl. 64-66) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 62,35 3. Total Services (CNAE 46-82, excl. 64-66) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 81,87 3. Total Services (CNAE 46-82, excl. 64-66) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 44,1 3. Total Services (CNAE 46-82, excl. 64-66) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 39,18 3. Total Services (CNAE 46-82, excl. 64-66) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 60,04 3. Total Services (CNAE 46-82, excl. 64-66) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 78,37 3. Total Services (CNAE 46-82, excl. 64-66) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 90,29 3. Total Services (CNAE 46-82, excl. 64-66) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 89,22 3. Total Services (CNAE 46-82, excl. 64-66) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 93,85 3. Total Services (CNAE 46-82, excl. 64-66) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,34 3. Total Services (CNAE 46-82, excl. 64-66) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 74,62 3. Total Services (CNAE 46-82, excl. 64-66) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 71,44 3. Total Services (CNAE 46-82, excl. 64-66) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 85,66 3. Total Services (CNAE 46-82, excl. 64-66) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 93,78 3. Total Services (CNAE 46-82, excl. 64-66) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 58,15 3. Total Services (CNAE 46-82, excl. 64-66) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 53,1 3. Total Services (CNAE 46-82, excl. 64-66) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 75,27 3. Total Services (CNAE 46-82, excl. 64-66) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 90,21 3. Total Services (CNAE 46-82, excl. 64-66) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 45,92 3. Total Services (CNAE 46-82, excl. 64-66) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 40,58 3. Total Services (CNAE 46-82, excl. 64-66) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 63,1 3. Total Services (CNAE 46-82, excl. 64-66) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 83,61 3. Total Services (CNAE 46-82, excl. 64-66) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 44,68 3. Total Services (CNAE 46-82, excl. 64-66) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 39,12 3. Total Services (CNAE 46-82, excl. 64-66) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 62,47 3. Total Services (CNAE 46-82, excl. 64-66) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 84,16 3. Total Services (CNAE 46-82, excl. 64-66) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 37,38 3. Total Services (CNAE 46-82, excl. 64-66) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 31,49 3. Total Services (CNAE 46-82, excl. 64-66) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 56,53 3. Total Services (CNAE 46-82, excl. 64-66) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 77,96 3. Total Services (CNAE 46-82, excl. 64-66) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 41,39 3. Total Services (CNAE 46-82, excl. 64-66) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 35,75 3. Total Services (CNAE 46-82, excl. 64-66) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 59,85 3. Total Services (CNAE 46-82, excl. 64-66) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 79,92 3. Total Services (CNAE 46-82, excl. 64-66) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 75,94 3. Total Services (CNAE 46-82, excl. 64-66) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 73,26 3. Total Services (CNAE 46-82, excl. 64-66) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 85,29 3. Total Services (CNAE 46-82, excl. 64-66) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 91,72 3. Total Services (CNAE 46-82, excl. 64-66) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 77,63 3. Total Services (CNAE 46-82, excl. 64-66) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 74,78 3. Total Services (CNAE 46-82, excl. 64-66) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 85,69 3. Total Services (CNAE 46-82, excl. 64-66) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 93,05 3. Total Services (CNAE 46-82, excl. 64-66) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 56,67 3. Total Services (CNAE 46-82, excl. 64-66) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 53,33 3. Total Services (CNAE 46-82, excl. 64-66) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 64,54 3. Total Services (CNAE 46-82, excl. 64-66) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 80,75 3. Total Services (CNAE 46-82, excl. 64-66) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 49,78 3. Total Services (CNAE 46-82, excl. 64-66) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 47,25 3. Total Services (CNAE 46-82, excl. 64-66) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 55,88 3. Total Services (CNAE 46-82, excl. 64-66) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 67,43 3. Total Services (CNAE 46-82, excl. 64-66) F.3 % of companies that experienced an ICT security incident (0) Total 6,51 3. Total Services (CNAE 46-82, excl. 64-66) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 5,75 3. Total Services (CNAE 46-82, excl. 64-66) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 8,64 3. Total Services (CNAE 46-82, excl. 64-66) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 14,41 3. Total Services (CNAE 46-82, excl. 64-66) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 55,8 3. Total Services (CNAE 46-82, excl. 64-66) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 53,08 3. Total Services (CNAE 46-82, excl. 64-66) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 60,74 3. Total Services (CNAE 46-82, excl. 64-66) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 67,31 3. Total Services (CNAE 46-82, excl. 64-66) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 38,51 3. Total Services (CNAE 46-82, excl. 64-66) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 36,22 3. Total Services (CNAE 46-82, excl. 64-66) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 45,76 3. Total Services (CNAE 46-82, excl. 64-66) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 40,48 3. Total Services (CNAE 46-82, excl. 64-66) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 48,51 3. Total Services (CNAE 46-82, excl. 64-66) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 49,95 3. Total Services (CNAE 46-82, excl. 64-66) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 41,94 3. Total Services (CNAE 46-82, excl. 64-66) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 52,19 3.1. Wholesale trade (CNAE 46) F.1 % of companies that apply some ICT security measure (0) Total 96,91 3.1. Wholesale trade (CNAE 46) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 96,99 3.1. Wholesale trade (CNAE 46) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,18 3.1. Wholesale trade (CNAE 46) F.1 % of companies that apply some ICT security measure (0) From 250 and up 98,74 3.1. Wholesale trade (CNAE 46) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 93,57 3.1. Wholesale trade (CNAE 46) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 92,6 3.1. Wholesale trade (CNAE 46) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 97,13 3.1. Wholesale trade (CNAE 46) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 98,16 3.1. Wholesale trade (CNAE 46) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 24,04 3.1. Wholesale trade (CNAE 46) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 20,33 3.1. Wholesale trade (CNAE 46) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 36,22 3.1. Wholesale trade (CNAE 46) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 47,92 3.1. Wholesale trade (CNAE 46) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 47,31 3.1. Wholesale trade (CNAE 46) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 42,89 3.1. Wholesale trade (CNAE 46) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 61,14 3.1. Wholesale trade (CNAE 46) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 79,28 3.1. Wholesale trade (CNAE 46) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 44,52 3.1. Wholesale trade (CNAE 46) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 40,8 3.1. Wholesale trade (CNAE 46) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 54,8 3.1. Wholesale trade (CNAE 46) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 78 3.1. Wholesale trade (CNAE 46) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 94,73 3.1. Wholesale trade (CNAE 46) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 94,11 3.1. Wholesale trade (CNAE 46) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 96,71 3.1. Wholesale trade (CNAE 46) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 98,94 3.1. Wholesale trade (CNAE 46) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 82,25 3.1. Wholesale trade (CNAE 46) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 79,97 3.1. Wholesale trade (CNAE 46) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 90,28 3.1. Wholesale trade (CNAE 46) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 94,49 3.1. Wholesale trade (CNAE 46) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 70,38 3.1. Wholesale trade (CNAE 46) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 66,97 3.1. Wholesale trade (CNAE 46) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 81,49 3.1. Wholesale trade (CNAE 46) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 92,86 3.1. Wholesale trade (CNAE 46) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 54 3.1. Wholesale trade (CNAE 46) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 49,74 3.1. Wholesale trade (CNAE 46) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 67,81 3.1. Wholesale trade (CNAE 46) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 82,47 3.1. Wholesale trade (CNAE 46) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 51,93 3.1. Wholesale trade (CNAE 46) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 47,48 3.1. Wholesale trade (CNAE 46) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 65,72 3.1. Wholesale trade (CNAE 46) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 84,62 3.1. Wholesale trade (CNAE 46) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 42,48 3.1. Wholesale trade (CNAE 46) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 37,61 3.1. Wholesale trade (CNAE 46) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 57,44 3.1. Wholesale trade (CNAE 46) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 78,91 3.1. Wholesale trade (CNAE 46) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 46,81 3.1. Wholesale trade (CNAE 46) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 42,17 3.1. Wholesale trade (CNAE 46) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 60,76 3.1. Wholesale trade (CNAE 46) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 82,79 3.1. Wholesale trade (CNAE 46) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 75,43 3.1. Wholesale trade (CNAE 46) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 72,75 3.1. Wholesale trade (CNAE 46) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 84,24 3.1. Wholesale trade (CNAE 46) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 92,44 3.1. Wholesale trade (CNAE 46) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 80,1 3.1. Wholesale trade (CNAE 46) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 77,07 3.1. Wholesale trade (CNAE 46) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 89,22 3.1. Wholesale trade (CNAE 46) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 93,07 3.1. Wholesale trade (CNAE 46) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 54,49 3.1. Wholesale trade (CNAE 46) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 51,23 3.1. Wholesale trade (CNAE 46) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 62,19 3.1. Wholesale trade (CNAE 46) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 77,76 3.1. Wholesale trade (CNAE 46) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 42,66 3.1. Wholesale trade (CNAE 46) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 41,92 3.1. Wholesale trade (CNAE 46) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 41,3 3.1. Wholesale trade (CNAE 46) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 61,9 3.1. Wholesale trade (CNAE 46) F.3 % of companies that experienced an ICT security incident (0) Total 7,05 3.1. Wholesale trade (CNAE 46) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 6,36 3.1. Wholesale trade (CNAE 46) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 8,44 3.1. Wholesale trade (CNAE 46) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 15,91 3.1. Wholesale trade (CNAE 46) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 48,07 3.1. Wholesale trade (CNAE 46) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 44,42 3.1. Wholesale trade (CNAE 46) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 52 3.1. Wholesale trade (CNAE 46) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 70,9 3.1. Wholesale trade (CNAE 46) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 45,88 3.1. Wholesale trade (CNAE 46) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 43,34 3.1. Wholesale trade (CNAE 46) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 52,35 3.1. Wholesale trade (CNAE 46) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 51,95 3.1. Wholesale trade (CNAE 46) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 48,75 3.1. Wholesale trade (CNAE 46) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 56,55 3.1. Wholesale trade (CNAE 46) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 23,02 3.1. Wholesale trade (CNAE 46) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 45,65 3.2. Retail trade (CNAE 47) F.1 % of companies that apply some ICT security measure (0) Total 87,57 3.2. Retail trade (CNAE 47) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 86,38 3.2. Retail trade (CNAE 47) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 93,41 3.2. Retail trade (CNAE 47) F.1 % of companies that apply some ICT security measure (0) From 250 and up 98,68 3.2. Retail trade (CNAE 47) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 91,06 3.2. Retail trade (CNAE 47) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 89,96 3.2. Retail trade (CNAE 47) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 96,59 3.2. Retail trade (CNAE 47) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 98,33 3.2. Retail trade (CNAE 47) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 17,82 3.2. Retail trade (CNAE 47) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 15,03 3.2. Retail trade (CNAE 47) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 31,5 3.2. Retail trade (CNAE 47) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 37,43 3.2. Retail trade (CNAE 47) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 38,56 3.2. Retail trade (CNAE 47) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 33,89 3.2. Retail trade (CNAE 47) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 58,89 3.2. Retail trade (CNAE 47) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 79,29 3.2. Retail trade (CNAE 47) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 33,82 3.2. Retail trade (CNAE 47) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 29,32 3.2. Retail trade (CNAE 47) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 52,53 3.2. Retail trade (CNAE 47) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 75,58 3.2. Retail trade (CNAE 47) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 89,82 3.2. Retail trade (CNAE 47) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 88,94 3.2. Retail trade (CNAE 47) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 94,9 3.2. Retail trade (CNAE 47) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 93,62 3.2. Retail trade (CNAE 47) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 71,3 3.2. Retail trade (CNAE 47) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 68,01 3.2. Retail trade (CNAE 47) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 87,28 3.2. Retail trade (CNAE 47) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 94,66 3.2. Retail trade (CNAE 47) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 52,48 3.2. Retail trade (CNAE 47) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 47,26 3.2. Retail trade (CNAE 47) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 76,91 3.2. Retail trade (CNAE 47) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 92,63 3.2. Retail trade (CNAE 47) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 37,89 3.2. Retail trade (CNAE 47) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 32,76 3.2. Retail trade (CNAE 47) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 60,65 3.2. Retail trade (CNAE 47) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 81,26 3.2. Retail trade (CNAE 47) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 38,95 3.2. Retail trade (CNAE 47) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 33,35 3.2. Retail trade (CNAE 47) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 63,65 3.2. Retail trade (CNAE 47) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 86,64 3.2. Retail trade (CNAE 47) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 27,41 3.2. Retail trade (CNAE 47) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 21,28 3.2. Retail trade (CNAE 47) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 55,52 3.2. Retail trade (CNAE 47) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 76,29 3.2. Retail trade (CNAE 47) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 31,33 3.2. Retail trade (CNAE 47) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 26,91 3.2. Retail trade (CNAE 47) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 48,23 3.2. Retail trade (CNAE 47) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 76,96 3.2. Retail trade (CNAE 47) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 72,66 3.2. Retail trade (CNAE 47) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 70,7 3.2. Retail trade (CNAE 47) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 80,88 3.2. Retail trade (CNAE 47) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 90,62 3.2. Retail trade (CNAE 47) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 76,02 3.2. Retail trade (CNAE 47) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 73,52 3.2. Retail trade (CNAE 47) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 85,91 3.2. Retail trade (CNAE 47) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 91,94 3.2. Retail trade (CNAE 47) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 56,62 3.2. Retail trade (CNAE 47) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 55,82 3.2. Retail trade (CNAE 47) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 56,23 3.2. Retail trade (CNAE 47) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 71,63 3.2. Retail trade (CNAE 47) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 45,78 3.2. Retail trade (CNAE 47) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 42,95 3.2. Retail trade (CNAE 47) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 58,04 3.2. Retail trade (CNAE 47) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 61 3.2. Retail trade (CNAE 47) F.3 % of companies that experienced an ICT security incident (0) Total 5,72 3.2. Retail trade (CNAE 47) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 5,47 3.2. Retail trade (CNAE 47) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 5,3 3.2. Retail trade (CNAE 47) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 13,4 3.2. Retail trade (CNAE 47) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 57,16 3.2. Retail trade (CNAE 47) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 52,93 3.2. Retail trade (CNAE 47) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 82,5 3.2. Retail trade (CNAE 47) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 68,07 3.2. Retail trade (CNAE 47) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 34,61 3.2. Retail trade (CNAE 47) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 36,04 3.2. Retail trade (CNAE 47) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 29,15 3.2. Retail trade (CNAE 47) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 26,88 3.2. Retail trade (CNAE 47) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 34,36 3.2. Retail trade (CNAE 47) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 34,09 3.2. Retail trade (CNAE 47) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 19,83 3.2. Retail trade (CNAE 47) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 55,91 3.3. Transport and storage (CNAE 49-53) F.1 % of companies that apply some ICT security measure (0) Total 88,55 3.3. Transport and storage (CNAE 49-53) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 87,14 3.3. Transport and storage (CNAE 49-53) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 93,39 3.3. Transport and storage (CNAE 49-53) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,7 3.3. Transport and storage (CNAE 49-53) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 89,74 3.3. Transport and storage (CNAE 49-53) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 88,73 3.3. Transport and storage (CNAE 49-53) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 92,22 3.3. Transport and storage (CNAE 49-53) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,7 3.3. Transport and storage (CNAE 49-53) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 21,95 3.3. Transport and storage (CNAE 49-53) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 19,58 3.3. Transport and storage (CNAE 49-53) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 26,38 3.3. Transport and storage (CNAE 49-53) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 50,76 3.3. Transport and storage (CNAE 49-53) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 41,22 3.3. Transport and storage (CNAE 49-53) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 36,25 3.3. Transport and storage (CNAE 49-53) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 54,15 3.3. Transport and storage (CNAE 49-53) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 87,26 3.3. Transport and storage (CNAE 49-53) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 35,76 3.3. Transport and storage (CNAE 49-53) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 30,72 3.3. Transport and storage (CNAE 49-53) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 49,68 3.3. Transport and storage (CNAE 49-53) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 79,53 3.3. Transport and storage (CNAE 49-53) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 88,03 3.3. Transport and storage (CNAE 49-53) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 87,34 3.3. Transport and storage (CNAE 49-53) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 89,36 3.3. Transport and storage (CNAE 49-53) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 96,14 3.3. Transport and storage (CNAE 49-53) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 69,37 3.3. Transport and storage (CNAE 49-53) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 66,03 3.3. Transport and storage (CNAE 49-53) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 79,27 3.3. Transport and storage (CNAE 49-53) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 95,84 3.3. Transport and storage (CNAE 49-53) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 49,97 3.3. Transport and storage (CNAE 49-53) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 44,46 3.3. Transport and storage (CNAE 49-53) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 66,54 3.3. Transport and storage (CNAE 49-53) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 92,57 3.3. Transport and storage (CNAE 49-53) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 40,16 3.3. Transport and storage (CNAE 49-53) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 34,96 3.3. Transport and storage (CNAE 49-53) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 54,32 3.3. Transport and storage (CNAE 49-53) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 86,07 3.3. Transport and storage (CNAE 49-53) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 32,19 3.3. Transport and storage (CNAE 49-53) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 26,98 3.3. Transport and storage (CNAE 49-53) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 45 3.3. Transport and storage (CNAE 49-53) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 83,45 3.3. Transport and storage (CNAE 49-53) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 29,3 3.3. Transport and storage (CNAE 49-53) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 23,69 3.3. Transport and storage (CNAE 49-53) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 44,32 3.3. Transport and storage (CNAE 49-53) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 79,89 3.3. Transport and storage (CNAE 49-53) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 33,18 3.3. Transport and storage (CNAE 49-53) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 28,61 3.3. Transport and storage (CNAE 49-53) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 43,36 3.3. Transport and storage (CNAE 49-53) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 82,21 3.3. Transport and storage (CNAE 49-53) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 73,05 3.3. Transport and storage (CNAE 49-53) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 69,77 3.3. Transport and storage (CNAE 49-53) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 84,25 3.3. Transport and storage (CNAE 49-53) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 93,16 3.3. Transport and storage (CNAE 49-53) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 72,67 3.3. Transport and storage (CNAE 49-53) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 69,81 3.3. Transport and storage (CNAE 49-53) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 78,7 3.3. Transport and storage (CNAE 49-53) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 93,04 3.3. Transport and storage (CNAE 49-53) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 53,43 3.3. Transport and storage (CNAE 49-53) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 50,74 3.3. Transport and storage (CNAE 49-53) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 56,04 3.3. Transport and storage (CNAE 49-53) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 83,19 3.3. Transport and storage (CNAE 49-53) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 46,2 3.3. Transport and storage (CNAE 49-53) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 43,76 3.3. Transport and storage (CNAE 49-53) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 50,85 3.3. Transport and storage (CNAE 49-53) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 65,33 3.3. Transport and storage (CNAE 49-53) F.3 % of companies that experienced an ICT security incident (0) Total 3,16 3.3. Transport and storage (CNAE 49-53) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 2,06 3.3. Transport and storage (CNAE 49-53) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 5,73 3.3. Transport and storage (CNAE 49-53) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 16,87 3.3. Transport and storage (CNAE 49-53) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 38,85 3.3. Transport and storage (CNAE 49-53) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 26,67 3.3. Transport and storage (CNAE 49-53) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 49,95 3.3. Transport and storage (CNAE 49-53) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 56,24 3.3. Transport and storage (CNAE 49-53) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 40,35 3.3. Transport and storage (CNAE 49-53) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 45,71 3.3. Transport and storage (CNAE 49-53) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 32,47 3.3. Transport and storage (CNAE 49-53) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 36,9 3.3. Transport and storage (CNAE 49-53) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 49,15 3.3. Transport and storage (CNAE 49-53) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 53,37 3.3. Transport and storage (CNAE 49-53) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 37,28 3.3. Transport and storage (CNAE 49-53) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 54,37 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1 % of companies that apply some ICT security measure (0) Total 82,74 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 80,55 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 94,1 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1 % of companies that apply some ICT security measure (0) From 250 and up 98,75 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 91,46 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 90,82 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 93,8 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 98,1 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 23,55 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 20,85 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 35 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 42,79 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 35,02 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 30,53 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 51,97 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 79,22 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 33,43 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 29,89 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 45,91 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 73,6 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 79,82 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 77,11 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 91,56 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,78 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 62,03 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 58,05 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 78,4 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 93,64 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 40,02 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 33,1 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 69,38 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 89,46 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 28,67 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 23,64 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 46,84 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 83,04 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 28,99 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 24,01 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 47,35 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 80,98 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 23,7 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 19,53 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 38,12 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 72,78 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 28,05 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 23,31 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 46,23 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 73,33 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 70,77 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 68,29 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 81,36 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 88,25 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 67,47 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 65,28 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 73,07 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 91,57 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 54,28 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 52,65 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 57,32 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 78,16 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 49,33 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 45,62 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 62,5 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 70 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3 % of companies that experienced an ICT security incident (0) Total 5,18 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 4,23 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,96 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 13,36 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 53,33 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 49,83 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 60,79 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 62,56 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 51,59 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 53,99 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 43,54 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 58,76 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 53,17 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 50,52 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 58,79 3.4. Hospitality: accommodation services and food and beverage services (CNAE 55-56) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 60,22 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1 % of companies that apply some ICT security measure (0) Total 95,58 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 94,36 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 100 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1 % of companies that apply some ICT security measure (0) From 250 and up 100 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 93,64 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 91,89 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 99,56 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 100 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 27,57 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 21,32 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 47,03 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 56,16 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 58,22 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 50,62 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 81,78 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 93,56 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 60,14 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 53,91 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 79,34 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 89,4 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 97,94 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 98,75 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 94,6 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,23 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 86,82 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 84,69 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 93,29 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 97,23 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 68,05 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 60,98 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 90,96 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 97,23 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 51,48 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 42,19 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 80,69 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 93,07 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 56,24 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 47,12 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 85,87 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 93,56 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 46,79 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 37,7 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 75,6 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 86,63 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 53,4 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 44,82 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 80,61 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 90,79 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 85,69 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 83,45 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 92,69 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 95,84 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 78,24 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 73,9 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 90,79 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 94,22 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 57,78 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 50,95 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 77,9 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 81,57 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 58,01 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 52,94 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 73,23 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 74,49 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3 % of companies that experienced an ICT security incident (0) Total 11,38 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 10,76 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,91 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 27,7 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 64,73 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 63,35 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 63,96 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 75 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 40,25 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 45,5 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 25,39 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 25 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 28,35 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 23,65 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 39,42 3.5. Publishing, broadcasting and content production and distribution (CNAE 58-60) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 45 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1 % of companies that apply some ICT security measure (0) Total 99,32 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 99,21 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 99,6 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,59 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 99,21 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 99,03 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 99,73 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,59 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 39,02 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 32,83 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 53,34 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 65,24 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 84,12 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 80,88 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 92,27 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 95,09 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 77,84 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 74,08 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 86,61 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 93,45 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 96,52 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 96,35 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 96,45 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 99,19 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 89,41 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 87,18 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 94,5 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 99,18 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 85,79 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 84,18 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 88,29 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 97,54 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 79,99 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 76,34 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 88,42 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 95,5 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 83,29 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 79,69 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 92,04 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 96,71 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 74,93 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 69,13 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 89,71 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 93,84 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 77,21 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 72,06 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 90,5 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 93,44 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 95,11 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 95,09 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 94,6 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 97,53 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 93,54 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 91,81 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 98,17 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 98,32 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 70,97 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 64,39 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 87,06 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 94,97 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 68,18 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 63,29 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 80,6 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 84,05 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3 % of companies that experienced an ICT security incident (0) Total 7,42 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 5,94 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,61 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 18,78 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 48,88 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 40,79 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 56,8 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 67,5 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 43,32 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 56,28 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 24,7 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 25,95 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 43,73 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 36,52 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 51,19 3.6. Information and telecommunications, information technology (IT), and repair and maintenance of computers and communication equipment (CNAE 61-63 and 95.1) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 59,46 3.7. Real estate activities (CNAE 68) F.1 % of companies that apply some ICT security measure (0) Total 98,91 3.7. Real estate activities (CNAE 68) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 98,71 3.7. Real estate activities (CNAE 68) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 100 3.7. Real estate activities (CNAE 68) F.1 % of companies that apply some ICT security measure (0) From 250 and up 100 3.7. Real estate activities (CNAE 68) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 95,07 3.7. Real estate activities (CNAE 68) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 95,27 3.7. Real estate activities (CNAE 68) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 92,88 3.7. Real estate activities (CNAE 68) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 100 3.7. Real estate activities (CNAE 68) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 16,88 3.7. Real estate activities (CNAE 68) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 12,71 3.7. Real estate activities (CNAE 68) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 37,61 3.7. Real estate activities (CNAE 68) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 53,5 3.7. Real estate activities (CNAE 68) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 60,21 3.7. Real estate activities (CNAE 68) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 57,06 3.7. Real estate activities (CNAE 68) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 74,62 3.7. Real estate activities (CNAE 68) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 94,9 3.7. Real estate activities (CNAE 68) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 47,28 3.7. Real estate activities (CNAE 68) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 41,57 3.7. Real estate activities (CNAE 68) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 77,49 3.7. Real estate activities (CNAE 68) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 87,26 3.7. Real estate activities (CNAE 68) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 91,85 3.7. Real estate activities (CNAE 68) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 90,66 3.7. Real estate activities (CNAE 68) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 98,62 3.7. Real estate activities (CNAE 68) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 97,45 3.7. Real estate activities (CNAE 68) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 84,16 3.7. Real estate activities (CNAE 68) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 83,11 3.7. Real estate activities (CNAE 68) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 88,67 3.7. Real estate activities (CNAE 68) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 97,45 3.7. Real estate activities (CNAE 68) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 57,77 3.7. Real estate activities (CNAE 68) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 52,71 3.7. Real estate activities (CNAE 68) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 83,3 3.7. Real estate activities (CNAE 68) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 100 3.7. Real estate activities (CNAE 68) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 51,28 3.7. Real estate activities (CNAE 68) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 47,11 3.7. Real estate activities (CNAE 68) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 71,75 3.7. Real estate activities (CNAE 68) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 89,17 3.7. Real estate activities (CNAE 68) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 47,03 3.7. Real estate activities (CNAE 68) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 40,23 3.7. Real estate activities (CNAE 68) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 82,88 3.7. Real estate activities (CNAE 68) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 94,9 3.7. Real estate activities (CNAE 68) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 41,84 3.7. Real estate activities (CNAE 68) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 35,89 3.7. Real estate activities (CNAE 68) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 71,7 3.7. Real estate activities (CNAE 68) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 92,36 3.7. Real estate activities (CNAE 68) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 44,02 3.7. Real estate activities (CNAE 68) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 39,07 3.7. Real estate activities (CNAE 68) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 67,76 3.7. Real estate activities (CNAE 68) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 92,36 3.7. Real estate activities (CNAE 68) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 83,93 3.7. Real estate activities (CNAE 68) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 82,05 3.7. Real estate activities (CNAE 68) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 93,37 3.7. Real estate activities (CNAE 68) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 100 3.7. Real estate activities (CNAE 68) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 82,83 3.7. Real estate activities (CNAE 68) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 80,12 3.7. Real estate activities (CNAE 68) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 95,62 3.7. Real estate activities (CNAE 68) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 97,45 3.7. Real estate activities (CNAE 68) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 56,93 3.7. Real estate activities (CNAE 68) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 51,97 3.7. Real estate activities (CNAE 68) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 78,09 3.7. Real estate activities (CNAE 68) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 94,9 3.7. Real estate activities (CNAE 68) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 46,11 3.7. Real estate activities (CNAE 68) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 44,16 3.7. Real estate activities (CNAE 68) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 54,94 3.7. Real estate activities (CNAE 68) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 58,6 3.7. Real estate activities (CNAE 68) F.3 % of companies that experienced an ICT security incident (0) Total 8,63 3.7. Real estate activities (CNAE 68) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 7,91 3.7. Real estate activities (CNAE 68) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 12,19 3.7. Real estate activities (CNAE 68) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 15,29 3.7. Real estate activities (CNAE 68) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 14,95 3.7. Real estate activities (CNAE 68) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 10,48 3.7. Real estate activities (CNAE 68) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 26,22 3.7. Real estate activities (CNAE 68) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 50 3.7. Real estate activities (CNAE 68) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 11,92 3.7. Real estate activities (CNAE 68) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 0 3.7. Real estate activities (CNAE 68) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 58,39 3.7. Real estate activities (CNAE 68) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 33,33 3.7. Real estate activities (CNAE 68) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 74,5 3.7. Real estate activities (CNAE 68) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 89,52 3.7. Real estate activities (CNAE 68) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 15,38 3.7. Real estate activities (CNAE 68) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 50 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1 % of companies that apply some ICT security measure (0) Total 97,66 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 97,23 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 99,82 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,03 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 93,45 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 92,35 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 98,32 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,26 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 24,66 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 19,59 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 45,21 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 58,79 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 57,79 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 51,93 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 82,65 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 92,34 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 58,54 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 52,7 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 83,76 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 90,84 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 95,5 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 95,32 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 95,55 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 99,75 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 85,46 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 83,86 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 91,68 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 97,54 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 72,43 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 68,28 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 89,95 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 97,54 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 58,97 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 53,55 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 80,98 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 95,23 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 60,69 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 54,99 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 84,58 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 95,56 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 51,26 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 44,58 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 79,36 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 91,81 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 55,09 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 48,13 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 85,42 3.8. Professional, scientific and technical activities (CNAE 69-75) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 92,8 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 82,36 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 79,27 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 95,71 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 99,51 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 82,59 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 79,93 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 91,49 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 97,03 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 57,15 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 52,03 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 73,44 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 88,64 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 54,06 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 51,72 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 60,67 3.8. Professional, scientific and technical activities (CNAE 69-75) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 71,98 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3 % of companies that experienced an ICT security incident (0) Total 9,42 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 9,23 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,6 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 13,51 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 75,02 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 73,87 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 82,56 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 71,17 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 26,83 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 20,88 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 58,52 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 29,9 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 44,89 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 44,97 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 41,18 3.8. Professional, scientific and technical activities (CNAE 69-75) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 55,1 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1 % of companies that apply some ICT security measure (0) Total 89,95 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 87,75 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 96,42 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1 % of companies that apply some ICT security measure (0) From 250 and up 97,97 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 89,66 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 87,58 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 94,44 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 98,56 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 23,08 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 23,42 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 17,39 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 35,1 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 39,24 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 36,21 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 39,9 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 69,53 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 34,32 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 27,6 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 48,7 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 66,03 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 88,28 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 86,81 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 91,15 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 96,01 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 61,53 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 54,89 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 77,98 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 86,6 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 41,15 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 34,88 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 52,25 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 77,11 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 32,08 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 25,14 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 44,69 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 71,04 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 27,23 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 19,8 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 40,09 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 70,58 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 23,64 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 16,6 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 36,63 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 62,58 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 27,98 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 20,54 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 43 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 65,6 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 67,56 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 63,88 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 75,61 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 84,38 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 73,25 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 68,88 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 81,28 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 88,49 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 55,69 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 53,4 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 55,57 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 74,34 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 48,65 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 47,49 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 46,15 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 64,16 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3 % of companies that experienced an ICT security incident (0) Total 6,3 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 5,22 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 9,43 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 10,34 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 52,3 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 48,3 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 54,34 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 70,98 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 38,15 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 30,23 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 51,75 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 50,8 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 62,9 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 69,19 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 54,96 3.9. Administrative activities and auxiliary services (incl. travel agencies) (CNAE 77-82) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 45,55 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1 % of companies that apply some ICT security measure (0) Total 99,43 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1 % of companies that apply some ICT security measure (0) From 10 to 49 99,31 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1 % of companies that apply some ICT security measure (0) From 50 to 249 99,81 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1 % of companies that apply some ICT security measure (0) From 250 and up 99,67 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) Total 98,32 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 10 to 49 97,83 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 50 to 249 99,78 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.A % of companies that apply strong password authentication as an ICT security measure (1) From 250 and up 99,35 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) Total 39,47 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 10 to 49 33,79 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 50 to 249 54,01 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1) From 250 and up 59,32 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) Total 80,87 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 10 to 49 76,65 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 50 to 249 91,8 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1) From 250 and up 95,08 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) Total 76,18 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 10 to 49 72,42 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 50 to 249 86,07 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1) From 250 and up 88,31 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) Total 96,64 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 10 to 49 96,31 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 50 to 249 97,1 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1) From 250 and up 99,35 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.F % of companies that apply network access control as an ICT security measure (1) Total 90,12 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.F % of companies that apply network access control as an ICT security measure (1) From 10 to 49 88,44 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.F % of companies that apply network access control as an ICT security measure (1) From 50 to 249 93,67 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.F % of companies that apply network access control as an ICT security measure (1) From 250 and up 99,01 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.G % of companies that apply VPN as an ICT security measure (1) Total 85,07 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.G % of companies that apply VPN as an ICT security measure (1) From 10 to 49 83,58 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.G % of companies that apply VPN as an ICT security measure (1) From 50 to 249 87,11 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.G % of companies that apply VPN as an ICT security measure (1) From 250 and up 97,37 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) Total 77,57 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 10 to 49 72,93 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 50 to 249 89,96 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1) From 250 and up 91,61 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) Total 80,44 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 10 to 49 75,97 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 50 to 249 91,72 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1) From 250 and up 96,71 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) Total 71,41 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 10 to 49 64,85 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 50 to 249 88,21 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1) From 250 and up 94,41 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) Total 74,81 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 10 to 49 69,04 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 50 to 249 89,82 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.1.K % of companies that carry out ICT security tests as an ICT security measure (1) From 250 and up 94,08 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2 % of companies that make their employees aware of their ICT security obligations (1) Total 93,96 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 10 to 49 93,24 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 50 to 249 95,43 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2 % of companies that make their employees aware of their ICT security obligations (1) From 250 and up 98,02 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) Total 93,27 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 10 to 49 91,56 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 50 to 249 97,8 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2) From 250 and up 97,99 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) Total 68,74 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 10 to 49 62,52 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 50 to 249 82,88 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2) From 250 and up 94,97 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) Total 63,42 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 10 to 49 58,58 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 50 to 249 74,82 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2) From 250 and up 82,25 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3 % of companies that experienced an ICT security incident (0) Total 9,28 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3 % of companies that experienced an ICT security incident (0) From 10 to 49 9,02 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3 % of companies that experienced an ICT security incident (0) From 50 to 249 7,97 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3 % of companies that experienced an ICT security incident (0) From 250 and up 18,15 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) Total 43,31 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 10 to 49 36,19 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 50 to 249 57,25 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4) From 250 and up 67,59 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) Total 45,15 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 10 to 49 53,1 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 50 to 249 25,48 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4) From 250 and up 25,17 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) Total 52,37 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 10 to 49 51,4 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 50 to 249 51,69 4. ICT Sector (CNAE 261-264, 465, 582, 61, 62, 631, 951) F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4) From 250 and up 60,18