methods, notes and classification Security incidents and consequences by size class of enterprise methods, notes and classification

    • Size classes in number of persons employed
      • 0 From 0 to 1 person employed
      • 1 From 0 to 9 persons employed
      • 2 From 1 to 4 persons employed
      • 3 From 1 to 9 persons employed
      • 4 From 2 to 9 persons employed
      • 5 From 5 to 9 persons employed
      • 6 From 10 to 49 persons employed
      • 7 From 10 to 249 persons employed
      • 8 10 persons employed or more
      • 9 From 50 to 249 persons employed
      • a 250 persons employed or more
    • Statistical classification of economic activities in the European Community (NACE Rev. 2)
      • 0 All activities, without financial sector
    • Information society indicator
      • 0 Enterprises experienced ICT security related incidents leading to: unavailability of ICT services due to hardware or software failures
      • 1 Enterprises experienced ICT security related incidents leading to: unavailability of ICT services due to attack from outside (e.g. Ransomware attacks, Denial of Service attacks)
      • 2 Enterprises experienced ICT security related incidents leading to: unavailability of ICT services (e.g. Denial of Service attacks, ransomware attacks, hardware or software failures)
      • 3 Enterprises experienced ICT security related incidents leading to: destruction or corruption of data due to hardware or software failures
      • 4 Enterprises experienced ICT security related incidents leading to: destruction or corruption of data due to infection of malicious software or unauthorised intrusion
      • 5 Enterprises experienced ICT security related incidents leading to: destruction or corruption of data (e.g. due to infection of malicious software or unauthorised intrusion, hardware or software failures)
      • 6 Enterprises experienced ICT security related incidents leading to: disclosure of confidential data due to intrusion, pharming, phishing attack, intentional actions by own employees
      • 7 Enterprises experienced ICT security related incidents leading to: disclosure of confidential data due to unintentional actions by own employees
      • 8 Enterprises experienced ICT security related incidents leading to: disclosure of confidential data (e.g. due to intrusion, pharming, phishing attack, actions by own employees (intentionally or unintentionally))
      • 9 Enterprises experienced any ICT security related incidents leading to: unavailability of ICT services, destruction or corruption of data, disclosure of confidential data (for any reason)
      • a Enterprises experienced any ICT security related incident leading to at least 3 consequences: of E_SEC2IUSVF, E_SEC2IUSVA, E_SEC2IDCDF, E_SEC2IDCDA, E_SEC2ICNFA, E_SEC2ICNFF
      • b Enterprises experienced at least once problems due to ICT security incident: unavailability of ICT services
      • c Enterprises experienced at least once problems due to ICT security incident: destruction or corruption of data
      • d Enterprises experienced at least once problems due to ICT security incident: disclosure of confidential data
      • e Enterprises experienced at least once problems due to an ICT related security incident (unavailability of ICT services, destruction or corruption of data, disclosure of confidential data)
      • f Enterprises did not experience any problem due to ICT related security incidents (unavailability of ICT services, destruction or corruption of data, disclosure of confidential data)
      • g Enterprises experienced ICT related security incidents that resulted in unavailability of ICT services, destruction or corruption of data due to hardware or software failures
      • h Enterprises experienced ICT related security incidents that resulted in unavailability of ICT services due to attacks from outside, e.g. Denial of Service attack
      • i Enterprises experienced ICT related security incidents that resulted in destruction or corruption of data due to infection or malicious software or unauthorised access
      • j Enterprises experienced ICT related security incidents that resulted in disclosure of confidential data due to intrusion, pharming, phishing attacks
      • k Enterprises experienced any ICT related security incidents excluding disclosure of confidential data in electronic form by employees
      • l Enterprises did not experience any ICT related security incidents excluding disclosure of confidential data in electronic form by employees
      • m Enterprises experienced ICT related security incidents resulting in disclosure of confidential data in electronic form by employees whether on intention or unintentionally
      • n Enterprises having insurance against ICT security incidents
    • Unit of measure
      • 0 Percentage of enterprises
      • 1 Percentage of the enterprises which use a computer
      • 2 Percentage of enterprises where persons employed have access to the internet
    • Geopolitical entity (reporting)
      • 00 European Union - 27 countries (from 2020)
      • 01 European Union - 28 countries (2013-2020)
      • 02 European Union - 27 countries (2007-2013)
      • 03 European Union - 25 countries (2004-2006)
      • 04 European Union - 15 countries (1995-2004)
      • 05 Euro area (EA11-1999, EA12-2001, EA13-2007, EA15-2008, EA16-2009, EA17-2011, EA18-2014, EA19-2015, EA20-2023)
      • 06 Belgium
      • 07 Bulgaria
      • 08 Czechia
      • 09 Denmark
      • 0a Germany
      • 0b Estonia
      • 0c Ireland
      • 0d Greece
      • 0e Spain
      • 0f France
      • 0g Croatia
      • 0h Italy
      • 0i Cyprus
      • 0j Latvia
      • 0k Lithuania
      • 0l Luxembourg
      • 0m Hungary
      • 0n Malta
      • 0o Netherlands
      • 0p Austria
      • 0q Poland
      • 0r Portugal
      • 0s Romania
      • 0t Slovenia
      • 0u Slovakia
      • 0v Finland
      • 0w Sweden
      • 0x Iceland
      • 0y Norway
      • 0z United Kingdom
      • 10 Bosnia and Herzegovina
      • 11 Montenegro
      • 12 North Macedonia
      • 13 Albania
      • 14 Serbia
      • 15 Türkiye