Cyber security longitudinal survey: wave four results

Purpose

The Cyber Security Longitudinal Survey (CSLS) aims to enhance understanding of cyber security policies and processes within medium and large businesses, as well as high-income charities. This research seeks to explore the links over time between these policies and processes and the likelihood and impact of a cyber incident. The CSLS is part of an ongoing study that began in 2022 with Wave One, followed by Wave Two in 2022, Wave Three in 2024, and now Wave Four, which enables comparisons across all phases.

Effects on Industry

The findings of this report are expected to have a significant impact on the UK’s cyber defences. By identifying effective cyber security policies and processes, medium and large businesses, as well as high-income charities, can enhance their resilience against cyber incidents. This, in turn, will contribute to the improvement of the overall cyber resilience of organisations across the UK economy. Furthermore, this research informs the government’s efforts to safely develop and deploy new and existing technologies within the UK.

Relevant Stakeholders

The CSLS is relevant to various stakeholders, including medium and large businesses, high-income charities, the government, and the broader UK economy. These stakeholders will benefit from the insights gained from this research, enabling them to enhance their cyber security policies and processes, thereby reducing the likelihood and impact of cyber incidents.

Next Steps

To comply with or respond to the findings of this report, medium and large businesses, high-income charities, and relevant government agencies should review their current cyber security policies and processes. They should also consider adopting best practices identified in this research to improve their resilience against cyber incidents.

Any Other Relevant Information

This report provides additional insight from qualitative interviews with survey respondents. These follow-up interviews offer a deeper understanding of the challenges faced by organisations in implementing effective cyber security policies and processes. For more comprehensive information on organisational cyber security behaviours, stakeholders are encouraged to consult the annual Cyber Security Breaches Survey.