Companies with 10 or more employees ICT in companies (2025 or first quarter of 2026) by branch of economic activity (CNAE-25 section C-O, excl. L; and group 951) and size of the company

ICT Security

Units:Percentage

Select values to consult
- Grouping of activity (CNAE-25 section C-O, excl. L and group 951)
  Values that contain
  
  Selected:19
  
  Total:19
- Main variables
  Values that contain
  
  Selected:1
  
  Total:20
- Company size
  Values that contain
  
  Selected:1
  
  Total:4

Choose format of the table

	Company size
Grouping of activity (CNAE-25 section C-O, excl. L and group 951) Main variables	.	.	.
	.	.	.
	.	.	.

Decimals to show:

Notes
- 1) The codes at the beginning of each subparagraph refer to the corresponding questionnaire question or the section from which they have been derived
  2) Main variables:
  3) (0) Percentage of the total number of companies with an Internet connection
  4) (1) Percentage of the total number of companies that apply ICT security measures
  5) (2) Percentage of the total number of companies that make their employees aware of ICT security measures
  6) (4) Percentage of the total number of companies that have suffered an ICT security incident

Total: 0seriesy 0cells

Source:INational Statistics Institute

F.1 % of companies that apply some ICT security measure (0)
F.1.A % of companies that apply strong password authentication as an ICT security measure (1)
F.1.B % of companies applying authentication using biometric methods as an ICT security measure (1)
F.1.C % of companies that apply authentication based on a combination of at least two authentication mechanisms as an ICT security measure (1)
F.1.D % of companies that apply encryption of data, documents or emails as an ICT security measure (1)
F.1.E % of companies that apply data backup in a separate location as an ICT security measure (1)
F.1.F % of companies that apply network access control as an ICT security measure (1)
F.1.G % of companies that apply VPN as an ICT security measure (1)
F.1.H % of companies that apply an ICT security monitoring system that allows detecting suspicious activity as an ICT security measure (1)
F.1.I % of companies that implement log file maintenance that allows analysis after ICT security incidents as an ICT security measure (1)
F.1.J % of companies implementing an ICT risk assessment as an ICT security measure (1)
F.1.K % of companies that carry out ICT security tests as an ICT security measure (1)
F.2 % of companies that make their employees aware of their ICT security obligations (1)
F.2.A % of companies offering voluntary training or providing internally available information to make their employees aware of their ICT security obligations (2)
F.2.B % of companies that require mandatory training or material viewing courses for their employees to make them aware of their ICT security obligations (2)
F.2.C % of companies that contractually make their employees aware of their ICT security obligations (2)
F.3 % of companies that experienced an ICT security incident (0)
F.3.A % of companies that, in 2025, after experiencing an ICT security incident, experienced unavailability of ICT services of ICT services due to an attack from the outside (4)
F.3.B % of companies that, in 2025, after experiencing an ICT security incident, resulted in the destruction or corruption of data due to malware infection or unauthorized intrusion (4)
F.3.C % of companies that, in 2025, after experiencing an ICT security incident, resulted in the disclosure of confidential data due to intrusions, pharming, phishing or intentional actions of the employees themselves (4)