The rise in reported incident numbers does not necessarily indicate a real increase in the number of attacks, as more cases come to light partly due to regulatory reporting obligations, it was revealed in the organization’s annual report.