The Canadian Survey of Cyber Security and Cybercrime is designed to measure the impact of cybercrime on Canadian businesses. The survey will gather information about:
- the measures businesses have implemented for cyber security, including employee training
- the types of cyber security incidents that impact businesses and
- the costs associated with preventing and recovering from cyber security incidents.
The data from this survey will be used by government departments to develop policies and programs that will help improve the cyber resilience of Canadian businesses.
Your information may also be used by Statistics Canada for other statistical and research purposes.
Collection period:
Pre-contact: From November 6 to December 4, 2023
Main survey: From January 8 to March 28, 2024
Collection methods:
Pre-contact: Telephone interview
Main survey: Electronic questionnaire with telephone follow-up for non-response
Survey participation:
Mandatory
Confidentiality
Data are collected under the authority of the Statistics Act, Revised Statutes of Canada, 1985, Chapter S-19.
By law, Statistics Canada is prohibited from releasing any information it collects that could identify any person, business, or organization, unless consent has been given by the respondent, or as permitted by the Statistics Act. Statistics Canada will use the information from this survey for statistical purposes only.
Data sharing agreements and record linkage
Data sharing agreements
To reduce respondent burden, Statistics Canada has entered into data-sharing agreements with provincial and territorial statistical agencies and other government organizations, which have agreed to keep the data confidential and use them only for statistical purposes. Statistics Canada will only share data from this survey with those organizations that have demonstrated a requirement to use the data.
Section 11 of the Statistics Act provides for the sharing of information with provincial and territorial statistical agencies that meet certain conditions. These agencies must have the legislative authority to collect the same information, on a mandatory basis, and the legislation must provide substantially the same provisions for confidentiality and penalties for disclosure of confidential information as the Statistics Act. Because these agencies have the legal authority to compel organizations to provide the same information, consent is not requested and organizations may not object to the sharing of the data.
For this survey, there are Section 11 agreements with the provincial and territorial statistical agencies of Newfoundland and Labrador, Nova Scotia, New Brunswick, Quebec, Ontario, Manitoba, Saskatchewan, Alberta, British Columbia and the Yukon.
The shared data will be limited to information pertaining to organizational establishments located within the jurisdiction of the respective province or territory.
Section 12 of the Statistics Act provides for the sharing of information with federal, provincial or territorial government organizations. Under Section 12, you may refuse to share your information with any of these organizations by writing a letter of objection to the Chief Statistician, specifying the organizations with which you do not want Statistics Canada to share your data and mailing it to the following address:
Chief Statistician of Canada
Statistics Canada
Attention of Director, Industrial Organization and Finance Division
150 Tunney's Pasture Driveway
Ottawa, ON
K1A 0T6
You may also contact us by e-mail at: statcan.digitaleconomysociety-economiesocietenumerique.statcan@statcan.gc.ca.
For this survey, there are Section 12 agreements with the statistical agencies of Prince Edward Island, Northwest Territories and Nunavut, as well as with Public Safety Canada.
For agreements with provincial and territorial government organizations, the shared data will be limited to information pertaining to organizational establishments located within the jurisdiction of the respective province or territory.
Record linkage
To enhance the data from this survey and to reduce the response burden, Statistics Canada may combine the information you provide with data from other surveys or administrative sources.
Topics covered in the survey
The survey asks questions about
- the measures businesses have implemented for cyber security, including employee training
- the types of cyber security incidents that impact businesses and
- the costs associated with preventing and recovering from cyber security incidents.
Published data
Statistics Canada publishes the results of its surveys in many formats. To find all the documents related to this survey, follow the links below and type the name of the survey in the search engine located at the left of your screen to filter the results.
Data: You will find tables, profiles of a community or region, thematic maps, public use microdata files, and data visualization tools.
Analysis: You will have direct access to Stats in brief (e.g., releases from The Daily, fact sheets), articles and reports, and journals and periodicals.
To see the results from CSCSC 2021, read the full Daily article: The Daily - Impact of cybercrime on Canadian businesses, 2021.