Research and analysis

Cyber Security Breaches Survey

The Government's annual survey detailing the costs and impacts of cyber breaches and attacks on organisations.



The Government is undertaking a survey of UK businesses and charities to find out how they approach cyber security and learn more about the cyber security issues they face. The research informs Government policy on cyber security and how the Government works with industry and charities to make the UK one of the most secure places to do business online.

The latest survey is called the Cyber Security Breaches Survey 2019. Ipsos MORI has been commissioned to carry out the survey fieldwork. This is taking place by telephone from October 2018 to December 2018.

During this period some organisations will be called by an Ipsos MORI interviewer from their Edinburgh office (their number will be 0131 561 4532) inviting them to take part.

The Government and Ipsos MORI can give the following reassurances about the survey:

  • Taking part is totally confidential and voluntary for all individuals and organisations.

  • The survey is not technical and participants do not need any specific IT knowledge.

  • Ipsos MORI would still like to speak to businesses and charities even if they have not had any cyber security issues, to help ensure the findings are representative of all organisations.

Further information and tips on how to prepare for your interview can be found on the study website

Who is being invited to take part?

Businesses across the UK have been selected at random from the Government’s Inter-Departmental Business Register. Charities have been selected from the Charity Commission database in England and Wales, the Office of the Scottish Charity Regulator, and the Charity Commission for Northern Ireland. Within these organisations, Ipsos MORI is inviting the senior person with the most knowledge or responsibility when it comes to cyber security to take part. In some organisations this might be a specific individual or Head of Department, while in other organisations it might be the business owner or one of the charity trustees.

You can access the survey’s privacy notice on the study website.

The privacy notice for DCMS obtaining a limited amount of personal information relating to around 70,000 to 80,000 business organisations from the Inter-Departmental Business Register can be found here. This Privacy Notice explains the personal data DCMS collected, who we have shared it with, and what your legal rights are.

What does participation involve?

Participation will involve a telephone interview with an interviewer from Ipsos MORI. On average interviews last around 20 minutes, though the actual interview length may vary depending on the answers that you give. The interview will take place at a time that is convenient for you.

How can organisations prepare for the survey?

To help those invited to take part prepare for the interview Ipsos MORI has reproduced some of the questions which appear in the survey on the study website.

Published 4 October 2016
Last updated 24 October 2018 + show all updates
  1. We have uploaded a Privacy Notice.
  2. Updated to include details on the 2019 survey. The fieldwork for the 2019 survey will begin in October 2019.
  3. This has been updated with the latest dates of the 2018 survey.
  4. First published.