The most commonly cited individual source of information remained external cyber security or IT consultants/providers (27% of businesses and 13% of charities).