Observed N

Percent

IT staff: Incident handling procedures and reporting

0-Not performed (non-existent)

11

28.2

1-Performed informally (unplanned)

26

66.7

2-Partially implemented (planned)

2

5.1

Total

39

100.0

Median = 1, E_i per category i = 1/6*39 = 6.5,

$X^2\left(df=5\right)=84.231$ , p = 0.000,

${\displaystyle \sum E_i}={\displaystyle \sum O_i}=N=39$

Management staff: Incident response team

0-Not performed (non-existent)

31

62.0

1-Performed informally (unplanned)

19

38.0

Total

50

100.0

Median = 0, E_i per category I = 1/6*50 = 8.3,

$X^2\left(df=5\right)=108.640$ , p = 0.000,

${\displaystyle \sum E_i}={\displaystyle \sum O_i}=N=50$

Users of IS: Incident reporting

0-Not performed (non-existent)

6

15.8

1-Performed informally (unplanned)

32

84.2

Total

38

100.0

Median = 1, E_i per category i = 1/6*38 = 6.3,

$X^2\left(df=5\right)=129.368$ , p = 0.000,

${\displaystyle \sum E_i}={\displaystyle \sum O_i}=N=38$