60 60% 40% 58 55 45 40 42 20% 0% 2020 2021 2022 Yes No Graph 8: According to the Respondents, Has the Cybersecurity Funding in their Organization in 2020-2022 Been Sufficient? (% of Respondents) 80% 77 85 76 2020 60% 2021 2022 40% 20% 6 0% 0-5% 6 2 1 5-10 % 1 1 10-15 % 1 1 13 7 1 21 Do not know More than 15 % Graph 9: Cybersecurity Budget – Share of Organizations´ Total Budget in 2020-2022 (% of Respondents) People as Experts: Increased Outsourcing and New Opportunities for Graduates Lack of cyber security experts continued to present one of the main challenges for Czech institutions and organisations during 2022. Prospective employees’ high expectations regarding their salaries are closely tied with this issue. In total, 74% of respondents openly declared that low salaries are a major factor discouraging candidates from applying for cybersecurity positions. The questioned organisations address this issue in various ways, with three broader growing trends identified over the last three years (see Graph 10). The number of organisations dealing with the lack of cybersecurity professionals by outsourcing has increased by almost 15% since 2020, with almost three-quarters of respondents taking this measure over the past year. A gradual increase is also visible in the recruitment of graduates. One fifth of the respondents then addressed the lack of expert by raising salaries to a more appropriate level. In the long term, outsourcing and opportunities for further development remain the most common solutions. 80% 60% 58 64 72 2020 2021 2022 42 39 38 40% 20% 17 25 13 21 19 22 17 18 Company culture Graduate recruitment 11 13 16 21 13 13 13 0% Outsourcing Further education opportunities Interesting projects and opportunity for creativeness Adequate salary Special employee benefits Graph 10: W  ays of Tackling the Shortage of Cybersecurity Professionals in 2020-2022 (% of Respondents) 12

Select target paragraph3