Each year Jisc conduct a survey amongst higher and further education establishments in the UK. The latest report is available here (published October 2019) - this year will no doubt be very different but hopefully those recognising and implementing improved cyber security practices and good cyber hygiene will be increasing:
(Jisc are the UK higher, further education and skills sectors’ not-for-profit organisation for digital services and solutions. Jisc originally stood for Joint information Systems Committee but has been known as Jisc since 2012)