6% of companies have not had a digital risk cyberattack since 2020