Over 90% of large US companies with 500+ employees have a cybersecurity policy in place to protect them from both real and anticipated threats. Clutch surveyed over 300 corporate IT decision-makers about what to include in a cybersecurity policy and found security software, data back-up and storage and scam detection are the most common areas that cybersecurity policies cover. Phishing attacks are the most commonly experienced cybersecurity attack among large companies; 57 percent of IT decision-makers surveyed said their company experienced one in the past year.