Policy paper

Exploring organisational experiences of cyber security breaches

An in-depth qualitative study with a range of businesses and organisations which have been affected by cyber security breaches.

Documents

Details

In March 2021 the Department for Digital, Culture, Media & Sport (DCMS) published the Cyber Security Breaches Survey of UK businesses, charities, and education institutions as part of the National Cyber Security Programme. The findings help businesses and organisations understand the nature and significance of the cyber security threats they face, and what others are doing to stay secure. It also supports the government to shape future policy in this area.

Building on this earlier research, in January 2022 DCMS commissioned an in-depth qualitative study with a range of businesses and organisations which have been affected by cyber security breaches. The specific aims of this research were as follows:

  • Understand the level of existing cyber security before a breach
  • Determine the type of cyber attack to which the organisation was subject
  • Understand how businesses and organisations act in the immediate, medium, and long-term aftermath of a breach
  • Investigate the impacts upon the business or organisations immediately and into the future
  • How cyber security arrangements have changed in the wake of a cyber breach
Published 17 August 2022