<p>This paper proposes an approach to define cybersecurity profiles in healthcare and social sector organizations and examines their relationship with managers perceived level of protection. The study addresses the growing concern about cybersecurity practices in these critical sectors. It identifies the key differentiators—training, regular up-dates, and data backup—used to cluster organizations into five distinct cybersecurity profiles. Using cluster and ANOVA analyses, it shows a significant relationship between these profiles and the managers’ opinions on cyber-security protection. Interestingly, managers in organizations with a ‘starter’ profile report the highest sense of protection, highlighting a potential gap between perceived and actual cybersecurity maturity. These findings offer new insights into how cybersecurity measures are implemented and perceived across sectors, informing targeted strategies for policy, awareness, and resource allocation.</p>