The document reports that 65% of surveyed medium-sized businesses in 2020 had a cyber attack or breach. What does this statistic contribute to the strategy?

### Why this is right The statistic is presented as survey evidence about the broader threat context. It helps readers understand that cyber incidents are a relevant organisational concern, but it does not describe Care Ltd’s own incident history. ### The concept Environmental information should be factual and as specific to the organisation as possible. Statistics can establish context, while organisation-specific assessments determine local exposure. A survey percentage is not a prediction for every individual organisation and is not itself a protective measure. ### The other options - **B. Proof that Care Ltd itself had a breach**: the statistic concerns surveyed medium-sized businesses, not Care Ltd. - **C. A guarantee that every medium-sized business will be attacked**: a reported percentage does not mean every business will experience an attack. - **D. A technical control that prevents phishing**: a statistic informs understanding; it does not block malicious messages. ### Terms - **Phishing**: deceptive messages intended to trick people into revealing information or taking unsafe actions. ### Remember Use statistics as context, not as proof of an individual organisation’s experience.