In 2022, 92 % of EU enterprises with 10 or more employees and self-employed persons used at least one measure in order to ensure integrity, availability and confidentiality of their data and ICT systems.
This information comes from data on ICT usage and e-commerce in enterprises published by Eurostat today. The article presents a handful of findings from the more detailed Statistics Explained article.
The most common measure used to ensure integrity, availability and confidentiality of enterprises’ data and ICT systems was strong password authentication (82 % of EU enterprises), followed by data backup to a separate location or cloud (78 %) and network access control (65 %). The least common measure was user identification and authentication via biometric methods (13 %).
In order to remain effective, security measures and procedures should be documented and updated regularly, to keep them up to date against the fast-evolving security threads. In 2022, 37 % of EU enterprises reported having documents on measures, practices or procedures on ICT security. Two-thirds of enterprises in Sweden (66 %) reported having such documents, while shares higher than 50 % were registered also in Finland (57 %), Denmark (55 %), Portugal (54 %) and Ireland (51 %). On the other hand, less than a quarter of enterprises had documents on measures, practices or procedures on ICT security in Greece (18 %), France (21 %) and Bulgaria (22 %).
Almost one quarter of EU enterprises (24 %) have defined or reviewed their documents on measures, practices or procedures on ICT security during the last 12 months. For 9 %, this was the case between 12 and 24 months ago, and for another 5 %, it was more than 24 months ago.
For more information
- Statistics Explained article on ICT security in enterprises
- Thematic section on digital economy and society
- Database on digital economy and society
Methodological notes:
- France: break in the time series due to the implementation of the statistical unit enterprise.
- Ireland: break in the time series due to changes in national survey methodology.
- See the methodological explanation regarding implementation of the question D3.
- Data come from the Community survey on ICT usage and e-commerce in enterprises and refer to all enterprises with at least 10 employees or self-employed persons (in NACE Rev. 2 sections C to J, L to N and group 95.1). Further methodological information related to the survey can be found in the relevant section.