| Observed N | Percent |

IT staff: Incident handling procedures and reporting | ||

0-Not performed (non-existent) | 11 | 28.2 |

1-Performed informally (unplanned) | 26 | 66.7 |

2-Partially implemented (planned) | 2 | 5.1 |

Total | 39 | 100.0 |

Median = 1, E ${X}^{2}\left(df=5\right)=84.231$ , p = 0.000, $\sum {E}_{i}}={\displaystyle \sum {O}_{i}}=N=39$ | ||

Management staff: Incident response team | ||

0-Not performed (non-existent) | 31 | 62.0 |

1-Performed informally (unplanned) | 19 | 38.0 |

Total | 50 | 100.0 |

Median = 0, E ${X}^{2}\left(df=5\right)=108.640$ , p = 0.000, $\sum {E}_{i}}={\displaystyle \sum {O}_{i}}=N=50$ | ||

Users of IS: Incident reporting | ||

0-Not performed (non-existent) | 6 | 15.8 |

1-Performed informally (unplanned) | 32 | 84.2 |

Total | 38 | 100.0 |

Median = 1, E ${X}^{2}\left(df=5\right)=129.368$ , p = 0.000, $\sum {E}_{i}}={\displaystyle \sum {O}_{i}}=N=38$ |