Cyber Security Longitudinal Survey: Wave 4, 2025

<P>Abstract copyright UK Data Service and data collection copyright owner.</P><br><p>The Cyber Security Longitudinal Survey (CSLS) helps us better understand cyber security policies and processes within medium and large businesses and high-income charities. It explores the links over time between these policies and processes and the likelihood and impact of a cyber incident. The survey is commissioned by The Department of Science, Innovation and Technology and aims to support the Government by providing evidence that can inform policies which help to make Britain a safer place to do business online. This is the fourth research year (or wave) of a multi-year study and the data were collected over 2024.</p> <p>The core objectives of the study are to:</p> <ul> <li>explore how and why UK organisations are changing their cyber security profile and how they implement, measure, and improve their cyber defences.</li><li>provide a more in-depth picture of larger organisations, covering topics that are lightly covered in the main Cyber Security Breaches Survey (also available from the UK Data Archive), such as corporate governance, supply chain risk management, internal and external reporting, cyber strategy, and cyber insurance.</li><li>explore the effects of actions adopted by organisations to improve their cyber security on the likelihood and impact of a cyber incident.</li></ul> <p>Further information and additional publications can be found on the GOV.UK <a href="https://www.gov.uk/government/collections/cyber-security-longitudinal-survey" target="_blank"> Cyber Security Longitudinal Survey</a> pages.</p> <p>Wave 1-3 data from the Cyber Security Longitudinal Survey can also be found on the UK Data Archive under SNs 8969, 9067 and&nbsp;<span>9284&nbsp;</span><span>respectively.</span></p><br><B>Main Topics</B>:<BR><br><div>The questionnaire covered the following topic areas:</div><div><br></div><ul><li>cyber profile of organisations</li><li>cyber security policies and processes and any improvements made over the last 12 months</li><li>supplier risks</li><li>influencers of changes in policies and processes</li><li>use and forms of cyber insurance</li><li>board engagement with cyber security&nbsp;</li><li>use of information or guidance from the National Cyber Security Centre (NCSC) to inform approach to cyber security</li><li>cyber security incident prevalence, impact and costs</li><li>cyber security incident management</li></ul><P>本摘要的版权归英国数据服务中心（UK Data Service）与本次数据采集的版权所有者共同所有。</P><br><p>网络安全纵向调查（Cyber Security Longitudinal Survey，简称CSLS）有助于我们更深入地理解中型、大型企业及高收入慈善机构内部的网络安全政策与流程。该调查旨在探究上述政策与流程随时间推移与网络安全事件发生概率及影响程度之间的关联。本次调查由英国科学、创新与技术部委托开展，旨在通过提供可用于制定政策的实证依据，助力英国政府打造更安全的线上营商环境。本研究为一项多年期研究的第四个调研年度（或第四波次），相关数据于2024年完成采集。</p><p>本研究的核心目标如下：</p><ul><li>探究英国各类机构调整其网络安全态势的方式与动因，以及其如何部署、评估并优化网络防御措施。</li><li>针对大型机构提供更深入的画像，涵盖主体《网络安全漏洞调查（Cyber Security Breaches Survey）》（亦可从英国数据档案馆（UK Data Archive）获取）中涉及较少的议题，例如公司治理、供应链风险管理、内外部报告机制、网络安全战略以及网络安全保险等。</li><li>探究机构为提升网络安全所采取的行动对网络安全事件发生概率及影响程度的作用效果。</li></ul><p>更多相关信息及衍生出版物可登录GOV.UK平台的<a href="https://www.gov.uk/government/collections/cyber-security-longitudinal-survey" target="_blank">网络安全纵向调查</a>页面查阅。</p><p>本网络安全纵向调查的第1至3波次数据亦可从英国数据档案馆（UK Data Archive）获取，对应的存档编号依次为SN 8969、SN 9067及SN 9284。</p><br><B>核心主题</B>:<BR><br><div>本次调查问卷涵盖以下议题领域：</div><div><br></div><ul><li>机构网络安全态势</li><li>网络安全政策与流程，以及过去12个月内开展的各项优化举措</li><li>供应商风险</li><li>推动政策与流程变革的影响因素</li><li>网络安全保险的使用情况与投保形式</li><li>董事会对网络安全事务的参与情况</li><li>参考英国国家网络安全中心（National Cyber Security Centre，简称NCSC）发布的信息与指南以制定网络安全相关策略</li><li>网络安全事件的发生情况、影响程度与相关成本</li><li>网络安全事件管理</li></ul>