Abstract copyright UK Data Service and data collection copyright owner.

The Cyber Security Longitudinal Survey (CSLS) helps us better understand cyber security policies and processes within medium and large businesses and high-income charities. It explores the links over time between these policies and processes and the likelihood and impact of a cyber incident. The survey is commissioned by The Department for Digital, Culture, Media and Sport and is part of the National Cyber Strategy. It aims to support the Government by providing evidence that can inform policies which help to make Britain a safer place to do business online. This is the second research year (or wave) of a three-year study and the data were collected over 2022.  The core objectives of the study are to:  explore how and why UK organisations are changing their cyber security profile and how they implement, measure, and improve their cyber defences.  provide a more in-depth picture of larger organisations, covering topics that are lightly covered in the Cyber Security Breaches Survey (available from the UK Data Archive under Generic Number 33549), such as corporate governance, supply chain risk management, internal and external reporting, cyber strategy, and cyber insurance.  explore the effects of actions adopted by organisations to improve their cyber security on the likelihood and impact of a cyber incident.  Further information and additional publications can be found on the GOV.UK Cyber Security Longitudinal Survey pages. Wave 1 data from the Cyber Security Longitudinal Survey can also be found on the UK Data Archive under Study Number 8969.

Main Topics:

The questionnaire covered the following topic areas:cyber profile of organisationsboard involvement in cyber securitycurrent cyber security policies and processes and any improvements made over the last 12 monthssupplier risksinfluencers of changes in policies and processesuse and forms of cyber insuranceuse of information or guidance from the National Cyber Security Centre (NCSC) to inform approach to cyber securitycyber security incident prevalence, impact and costscyber security incident management

Multi-stage stratified random sample

Self-administered questionnaire: Web-based (CAWI)

Telephone interview: Computer-assisted (CATI)