Summary information

Study title

Cyber Security Longitudinal Survey: Wave 2, 2022

Creator

Department for Digital, Culture, Media and Sport

Study number / PID

9067 (UKDA)

10.5255/UKDA-SN-9067-1 (DOI)

Data access

Restricted

Series

Not available

Abstract

Abstract copyright UK Data Service and data collection copyright owner.The Cyber Security Longitudinal Survey (CSLS) helps us better understand cyber security policies and processes within medium and large businesses and high-income charities. It explores the links over time between these policies and processes and the likelihood and impact of a cyber incident. The survey is commissioned by The Department for Digital, Culture, Media and Sport and is part of the National Cyber Strategy. It aims to support the Government by providing evidence that can inform policies which help to make Britain a safer place to do business online. This is the second research year (or wave) of a three-year study and the data were collected over 2022.  The core objectives of the study are to:  explore how and why UK organisations are changing their cyber security profile and how they implement, measure, and improve their cyber defences.  provide a more in-depth picture of larger organisations, covering topics that are lightly covered in the Cyber Security Breaches Survey (available from the UK Data Archive under Generic Number 33549), such as corporate governance, supply chain risk management, internal and external reporting, cyber strategy, and cyber insurance.  explore the effects of actions adopted by organisations to improve their cyber security on the likelihood and impact of a cyber incident.  Further information and additional publications can be found on the GOV.UK Cyber Security Longitudinal Survey pages. Wave 1 data from the Cyber Security Longitudinal Survey can also be found on the UK Data Archive under Study Number 8969.Main Topics:The questionnaire covered the following topic areas:cyber profile of organisationsboard involvement in cyber securitycurrent cyber security policies and processes and any improvements made over the last 12 monthssupplier risksinfluencers of changes in policies and processesuse and forms of cyber insuranceuse...
Read more

Methodology

Data collection period

08/04/2022 - 28/06/2022

Country

United Kingdom

Time dimension

Longitudinal/panel/cohort

Analysis unit

Institutions/organisations
National

Universe

Medium (defined as 50-249 employees) and large (defined as 250+ employees) businesses and large charities (defined as a turnover of at least £1 million) in the UK. The main sampling frame is the Inter-Departmental Business Register, supplied by the ONS. See documentation for further details.

Sampling procedure

Multi-stage stratified random sample

Kind of data

Numeric

Data collection mode

Self-administered questionnaire: Web-based (CAWI)
Telephone interview: Computer-assisted (CATI)

Access

Publisher

UK Data Service

Publication year

2023

Terms of data access

The Data Collection is available to UK Data Service registered users subject to the End User Licence Agreement.

Commercial use of the data requires approval from the data owner or their nominee. The UK Data Service will contact you.