A government-backed report into information security incidents in British business has revealed that the average number of companies reporting such incidents has fallen since 2004. This may indicate that the business community is starting to win its war against malicious attacks in a world where information technology has become firmly embedded into the business environment. A more responsible approach has also led to better updating practices with 80% of businesses updating antivirus signatures within a day, in comparison with 59% in 2004. While the number of companies updating their antivirus software within a day of release of new signatures is relatively high at 80%, only 64% of businesses update their operating systems in the same timeframe. This is demonstrated by the fact that while 88% of companies overall had no formally trained staff responsible for information security, this number dropped to 71% for large businesses.