XEVRIONOps
Start free trial

Research and sources

Every statistic we use, and where it comes from.

The published figures behind Xevrion's choices, in the source's own words, with the date, what each one is out of, its caveat and where Xevrion uses it. They describe UK businesses or workers in general, never a result for any one business.

Sources

The figures, as published.

8 statistics from 3 sources. Registry version 1.0.0, updated 4 October 2026.

43%Published statistic

43% of UK businesses had a cyber security breach or attack in the last 12 months.

Just over four in ten businesses (43%) … reported having experienced any kind of cyber security breach or attack in the last 12 months.

In the source's words
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
UK businesses
Caveat
Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: Expected yearly loss on the Overview (the chance of a breach in a year); Websites: home page and Security page.
85%Published statistic

Of the businesses that had a breach or attack, 85% had phishing: fake emails or messages.

experienced by 85% of businesses

In the source's words
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
UK businesses that reported a breach or attack in the last 12 months
Caveat
A share of the businesses that had a breach or attack, not of all businesses. Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: noted in the fix list next to phishing training and two-step sign-in, and which phishing defences are open, on the Overview; Websites: Security page.
£1,600Published statistic

On average, a business's most disruptive breach in the year cost it £1,600.

The average cost of the most disruptive breach for each business in the last 12 months was £1,600 for businesses

In the source's words
  • £3,550 excluding businesses reporting zero cost
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
UK businesses that reported a breach or attack
Caveat
The average includes businesses that reported a cost of nothing; leaving those out, it was £3,550. Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: Expected yearly loss on the Overview (the cost of a breach); Websites: home page and Security page.
45%Published statistic

45% of UK businesses have some kind of cyber insurance.

Almost half of businesses (45%) … reported being insured against cyber security risks in some way.

In the source's words
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
UK businesses
Caveat
Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: the evidence pack's context for insurers, on Reports; Websites: Security page.
3%Published statistic

Only 3% of UK businesses hold Cyber Essentials (21% of larger businesses), and only 12% of businesses are aware of it.

a small minority of businesses hold Cyber Essentials (3%), it is higher among larger businesses (21%)

In the source's words
  • 21% of larger UK businesses
  • 12% of UK businesses aware of Cyber Essentials
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
UK businesses
Caveat
Readiness in Xevrion is not certification: Cyber Essentials is certified through an IASME certification body. Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: Frameworks, Cyber Essentials as something few businesses hold; Websites: Security page and /research.
75%Published statistic

75% of large businesses and 53% of medium businesses have a formal plan for a cyber incident.

Formal incident response plans: 53% of medium businesses and 75% of large businesses.

As the source reports the figures
  • 53% of medium UK businesses
Publisher
Department for Science, Innovation and Technology
Published
2025
Out of
large UK businesses
Caveat
Recorded as the survey reports the figures, not in one of its sentences. Reported by UK businesses in a national survey. A national average, not a prediction for any one business.
Where Xevrion uses it
Security: Incidents, the one-page plan; Websites: Security page.
60%Published statistic

Workers around the world spend 60% of their time on coordinating work, not on the skilled work they were hired for.

global workers are losing 60 percent of their time on work coordination rather than the skilled, strategic jobs they've been hired to do.

In the source's words
Publisher
Asana
Published
2021
Out of
workers worldwide
Caveat
Published by Asana in a press release about its own research. A global figure from 2021, not measured in your business.
Where Xevrion uses it
Team: the share of coordination Xevrion did against people, on the Overview; Automations: Opportunities ranked by hours of coordination removed; Websites: home page and Automations page.
Nearly three-quartersPublished statistic

In McKinsey's survey, nearly three-quarters of high performers say they fundamentally redesigned workflows because of their AI use, against just one-quarter of other respondents.

Nearly three-quarters of high performers report fundamentally redesigning workflows because of their AI use

In the source's words
  • just one-quarter of other respondents (other respondents)
Publisher
McKinsey & Company
Published
25 August 2026
Out of
high performers in the survey
Caveat
This shows that the two go together (a correlation). It does not prove that redesigning workflows causes better results.
Where Xevrion uses it
Automations: the "Redesign the whole workflow" option in Design my automation; Websites: Automations and Insights pages.

Worked out

Expected yearly loss.

How Security puts a national average cost next to your score.

43% × £1,600 = £688 a year. The share of UK businesses that had a breach or attack in a year, times the average cost of a business's most disruptive breach. The UK national average for a business, not a prediction for your business.

The cost figure includes businesses that said a breach cost them nothing; leaving those out, the survey's average was £3,550.

Our rules

How we use published figures.

  • Every statistic names its source, with a link, wherever it appears: on these sites and in the portal.
  • The source's words are kept exactly. Where a figure is reported without a sentence to quote, we say so.
  • National and global figures are context for a decision. They are never shown as Xevrion results or as a prediction for your business.
  • A correlation is called a correlation. The McKinsey figure shows two things go together, not that one causes the other.
  • Estimates in the portal say they are estimates, and how they are worked out.