Canadian Survey of Cyber Security and Cybercrime (CSCSC)

The Canadian Survey of Cyber Security and Cybercrime is designed to measure the impact of cybercrime on Canadian businesses. It was launched in 2017 because of the need to benchmark and monitor the rapidly evolving environment surrounding cyber security and cybercrime.

The survey gathers information about

• the cyber security measures businesses have implemented, including employee training
• the types of cyber security incidents that affect businesses
• the costs associated with recovering from and preventing cyber security incidents.

Data from this survey are intended for

• federal government departments to support the development of policies and programs that will help to improve the cyber resilience of Canadian businesses
• provincial governments, academic researchers, and the Canadian public to better understand the impact of cybercrime on Canadian businesses
• industry associations and private businesses to study the characteristics of cyber security and cybercrime within their industry.

Your information may also be used by Statistics Canada for other statistical and research purposes.

• Block Information Confidentiality

  Confidentiality

  Data are collected under the authority of the Statistics Act, Revised Statutes of Canada, 1985, Chapter S-19.

  By law, Statistics Canada is prohibited from releasing any information it collects that could identify any person, business, or organization, unless consent has been given by the respondent, or as permitted by the Statistics Act. Statistics Canada will use the information from this survey for statistical purposes only.

• Block Information on Data sharing agreements and record linkage

  Data sharing agreements and record linkage

  Data sharing agreements

  To reduce response burden, Statistics Canada has entered into data sharing agreements with provincial and territorial statistical agencies and other government organizations, which have agreed to keep the data confidential and use them for statistical purposes only. Statistics Canada will share data from this survey only with those organizations that have demonstrated a requirement to use the data.

  Section 11 of the Statistics Act provides for the sharing of information with provincial and territorial statistical agencies that meet certain conditions. These agencies must have the legislative authority to collect the same information, on a mandatory basis, and the legislation must include substantially the same provisions for confidentiality and penalties for disclosure of confidential information as the Statistics Act. Because these agencies have the legal authority to compel businesses to provide the same information, consent is not requested and businesses may not object to the sharing of the data.

  For this survey, there are Section 11 agreements with the provincial and territorial statistical agencies of Newfoundland and Labrador, Nova Scotia, New Brunswick, Quebec, Ontario, Manitoba, Saskatchewan, Alberta, British Columbia, and Yukon. The data shared will be limited to information pertaining to business establishments located within the jurisdiction of the respective province or territory.

  Section 12 of the Statistics Act provides for the sharing of information with federal, provincial or territorial government organizations. Under Section 12, you may refuse to share your information with any of these organizations by writing a letter of objection to the Chief Statistician, specifying the organizations with which you do not want Statistics Canada to share your data and mailing it to the following address:

  Chief Statistician of Canada
  Statistics Canada
  Attention of Director, Investment, Science and Technology Division
  150 Tunney's Pasture Driveway
  Ottawa, Ontario
  K1A 0T6

  You may also contact us by email at: statcan.istdinformation-distinformation.statcan@canada.ca.

  For this survey, there are Section 12 agreements with the statistical agencies of Prince Edward Island, the Northwest Territories and Nunavut, as well as with Public Safety Canada; the Royal Canadian Mounted Police; Natural Resources Canada; the Communications Security Establishment; Innovation, Science and Economic Development Canada; and Public Services and Procurement Canada.

  For agreements with provincial and territorial government organizations, the data shared will be limited to information pertaining to business establishments located within the jurisdiction of the respective province or territory.

  Record linkage

  To enhance the data from this survey and reduce response burden, Statistics Canada may combine the information you provide with data from other surveys or administrative sources.

• Block Information on Topics covered in the survey

  Topics covered in the survey

  The survey asks questions about

  • the cyber security measures businesses have implemented, including employee training
  • the types of cyber security incidents that affect businesses
  • the costs associated with recovering from and preventing cyber security incidents.

• Block Information on Published data

  Published data

  Statistics Canada publishes the results of its surveys in many formats.

  To see the results from CSCSC 2019, read the full Daily article.

  To find all the documents related to this survey, follow the links below and type the name of the survey in the search engine located at the left of your screen to filter the results.

  Data: You will find tables, profiles of a community or region, thematic maps, public use microdata files, and data visualization tools.

  Analysis: You will have direct access to Stats in brief (e.g., releases from The Daily, fact sheets), articles and reports, and journals and periodicals.

• For more information about this survey (questionnaires, definitions, data sources and methods used): survey number 5244