Cyber Security Longitudinal Survey: Wave 3, 2024

<P>Abstract copyright UK Data Service and data collection copyright owner.</P><br><p>The <span>Cyber Security Longitudinal Survey</span>&nbsp; (CSLS) helps us better understand cyber security policies and processes within medium and large businesses and high-income charities. It explores the links over time between these policies and processes and the likelihood and impact of a cyber incident.<span> The survey is commissioned by The Department of Science, Innovation and Technology as&nbsp;</span><span>part of the National Cyber Strategy. It aims to support the Government by providing evidence that can inform policies which help to make Britain a safer place to do business online. This is the third research year (or wave) of a multi-year study and the data were collected over 2023.
<br>
</span></p>
<p><span>&nbsp;The core objectives of the study are to:&nbsp;</span></p>
<ul>
<li>
<p><span>explore how and why UK organisations are changing their cyber security profile and how they implement, measure, and improve their cyber defences.&nbsp;</span></p>
</li><li>
<p><span>provide a more in-depth picture of larger organisations, covering topics that are lightly covered in the main&nbsp;<span>Cyber Security Breaches Survey</span> (also available from the UK Data Archive), such as corporate governance, supply chain risk management, internal and external reporting, cyber strategy, and cyber insurance.&nbsp;</span></p>
</li><li>
<p><span>explore the effects of actions adopted by organisations to improve their cyber security on the likelihood and impact of a cyber incident.&nbsp;</span></p>
</li></ul>
<p><span></span></p>
<p><span>Further information and additional publications can be found on the </span>
<a href="https://www.gov.uk/government/collections/cyber-security-longitudinal-survey">GOV.UK Cyber Security Longitudinal Survey</a><a href="https://www.gov.uk/government/publications/cyber-security-longitudinal-survey-wave-two-results"><span></span></a><span> pages.</span></p>
<p>Wave 1 and 2 data from the <span>Cyber Security Longitudinal Survey</span> can also be found on the UK Data Archive under SNs 8969 and 9067 respectively.</p><br><B>Main Topics</B>:<BR><br><p><span>The questionnaire covered the following topic areas:</span></p>
<ul>
<li><span>cyber profile of organisations</span></li><li><span>cyber security policies and processes </span><span>and any improvements made over the last 12 months</span></li><li><span>supplier risks</span></li><li><span>influencers of changes in policies and processes</span></li><li><span>use and forms of cyber insurance</span></li><li><span>board engagement with cyber security&nbsp;</span></li><li><span>use of information or guidance from the National Cyber Security Centre (NCSC) to inform approach to cyber security</span></li><li><span>cyber security incident </span><span>prevalence, impact and </span><span>costs</span></li><li><span>cyber security incident management</span></li></ul>