| Economic activities total | Total | Enterprises with formally defined ICT security policy, % | | 16.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.7 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 10.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 2.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 2.6 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 18.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 5.7 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 24.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 12.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.1 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 39.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 15.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 13.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 10.1 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 51.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 29.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 10.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 11.7 |
| Agriculture, forestry and fishing | Total | Enterprises with formally defined ICT security policy, % | | 3.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 1.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 1.2 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 6.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 3.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 3.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Mining and quarrying | Total | Enterprises with formally defined ICT security policy, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 5.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Manufacturing | Total | Enterprises with formally defined ICT security policy, % | | 16.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.0 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 9.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.8 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 13.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 7.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.3 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 20.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 12.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 5.1 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 34.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 13.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 10.6 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 55.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 34.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.5 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 11.1 |
| Electricity, gas, steam and air conditioning supply | Total | Enterprises with formally defined ICT security policy, % | | 24.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 13.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 1.6 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 27.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 9.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 18.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 50.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 25.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 16.7 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 8.3 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 50.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 25.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 25.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 100.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 100.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Water collection, treatment and supply | Total | Enterprises with formally defined ICT security policy, % | | 16.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 2.8 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 7.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.1 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 66.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Construction | Total | Enterprises with formally defined ICT security policy, % | | 9.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 5.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 1.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 3.1 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 6.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 1.8 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 11.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 6.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 1.5 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.5 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 21.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 9.8 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 40.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 40.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Wholesale and retail trade; repair of motor vehicles and motorcycles | Total | Enterprises with formally defined ICT security policy, % | | 17.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 6.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 5.5 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 3.7 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 20.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 27.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 9.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 8.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 9.6 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 33.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 10.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 19.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 3.6 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 54.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 24.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 15.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 15.2 |
| Transportation and storage | Total | Enterprises with formally defined ICT security policy, % | | 17.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 9.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.8 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 12.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 1.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 2.4 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 16.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 5.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 23.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 7.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 7.7 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.7 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 57.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 21.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 23.7 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 13.2 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 46.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 13.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 6.7 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 26.7 |
| Accommodation and food service activities | Total | Enterprises with formally defined ICT security policy, % | | 7.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 2.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 1.2 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 5.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 2.2 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 7.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 2.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 7.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 7.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 29.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 24.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 57.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 28.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 28.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| Information and communication | Total | Enterprises with formally defined ICT security policy, % | | 41.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 26.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 6.5 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 19.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 18.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 67.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 36.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 23.5 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.6 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 47.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 23.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 7.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 16.8 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 55.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 22.2 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 50.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 8.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 8.3 |
| Financial and insurance activities | Total | Enterprises with formally defined ICT security policy, % | | 62.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 36.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 10.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 15.7 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 42.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 27.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 7.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.3 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 60.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 13.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 13.6 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 81.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 45.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 18.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 18.2 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 100.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 50.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 50.0 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 100.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 57.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 14.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 28.6 |
| Real estate activities | Total | Enterprises with formally defined ICT security policy, % | | 16.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 15.3 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 19.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 19.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 10.0 |
| Professional-, scientific and technical activity | Total | Enterprises with formally defined ICT security policy, % | | 22.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 6.2 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 6.3 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 14.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 7.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.4 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 1.8 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 31.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 13.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.5 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 13.6 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 42.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 21.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 12.1 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 55.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 22.2 |
| Administrative and support service activities | Total | Enterprises with formally defined ICT security policy, % | | 17.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 5.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 3.5 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 8.6 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 12.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 3.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.8 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 19.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.9 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 9.9 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 9.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 9.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 100-249 | Enterprises with formally defined ICT security policy, % | | 45.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 14.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 18.5 |
| 250 and more | Enterprises with formally defined ICT security policy, % | | 19.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 4.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 4.8 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 9.5 |
| Education | Total | Enterprises with formally defined ICT security policy, % | | 19.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 7.3 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 22.2 |
| Human health and social work activities | Total | Enterprises with formally defined ICT security policy, % | | 25.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 12.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 9.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 3.8 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 17.4 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 8.7 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 8.7 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 30.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 10.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 10.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 50.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 27.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 5.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 16.7 |
| Arts, entertainment and recreation | Total | Enterprises with formally defined ICT security policy, % | | 33.9 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 18.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.6 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 4.2 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 33.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 22.2 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 11.1 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 12.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 12.5 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 50-99 | Enterprises with formally defined ICT security policy, % | | 57.1 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 28.6 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 28.6 |
| Other service activities | Total | Enterprises with formally defined ICT security policy, % | | 2.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 2.3 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 10-19 | Enterprises with formally defined ICT security policy, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |
| 20-49 | Enterprises with formally defined ICT security policy, % | | 9.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12 months, % | | 9.8 |
| Enterprises whose ICT security policy was formally defined/modified within the last 12-24 months, % | | 0.0 |
| Enterprises whose ICT security policy was formally defined/modified more than 24 months ago, % | | 0.0 |