statistics_canada_logo.png (image - 700 x 700 free)

Canadian Survey of Cyber Security and Cybercrime


Why are Statistics Canada data on the SERENE-RISC website?

Statistics Canada is the National Statistical Agency. It ensures that Canadians have access to the important information they need about Canada's economy, society and environment to act effectively as citizens and decision-makers. SERENE-RISC is a knowledge mobilization network that allows the community to better protect themselves from IT threats and minimize consequences.

In collaboration with Statistics Canada, SERENE-RISC is providing access to recent and unique data on cybersecurity and cybercrime in Canada. These data were collected as part of the 2017 Canadian Survey of Cyber Security and Cybercrime, which aims to better understand the impact of digital risks on businesses of all sizes. The collaboration of the two organizations aims to facilitate a wider dissemination of the results of this survey and to enable businesses, federal, provincial and municipal government agencies, researchers, and the general population to access reliable statistics to improve their level of protection against cyber risks.


What is the purpose of the 2017 Canadian Survey of Cyber ​​Security and Cybercrime ?

Canadian businesses continue to rapidly embrace digital technologies, exposing them to greater cyber security risks and threats. However, the impact of these risks and threats on business investments and day-to-day business decisions is not easily understood, as cyber security incidents are often not reported.

The 2017 Canadian Survey of Cyber ​​Security and Cybercrime is the first of its kind in Canada and one of the most recent and comprehensive in the world. It aims to fill some of the statistical gaps by presenting a picture of the current threat environment in a way that was not previously possible, by providing new and up-to-date information on the behavior of Canadian companies responding to cyber security challenges.

It collects data on the impact of cybercrime on Canadian businesses as well as data on their activities to mitigate the effects of cyber security incidents. The survey measured investments in cyber security measures, cyber security training, the number of cyber security incidents, and the costs associated with responding to these incidents. The survey makes it easy for businesses to compare their situation to that of their industry, and to easily and quickly create reports on a variety of topics.


Where do the survey data come from, why are they reliable and how were they compiled?

This is a mandatory survey, which makes its results extremely interesting. Data are obtained directly from respondents using electronic questionnaires. Data for 2017 were collected from January to April 2018. The target population included businesses with operations in Canada with 10 or more employees in all sectors except government. The final sample size was 12,597 firms, and the response rate was 86%.

Since companies are not always aware of cyber security incidents that have affected them or are unwilling to report certain incidents, the survey results may have been affected by an underreporting bias.

Companies were only asked to report incidents that impacted them. As a result, incidents that companies deemed not impactful are not captured in these data. 

To find out more, click here.


What guidelines were given to respondents who participated in the survey?

In order to fully understand this survey, do not hesitate to consult the "Information for respondents" section which will inform you about the general guidelines to the respondents as well as the description of the questions administered.


How can I access the survey?

To access the results of the 2017 Canadian Survey of Cyber ​​Security and Cybercrime and download them as aggregated tables in Microsoft Excel format, click on the icon below:

StatCan_result (thumb - 200 x 200 free)

In addition, Statistics Canada offers a web-based application that provides access to cyber security and cybercrime data in Canada in 23 industries of the North American Industry Classification System (NAICS) Canada.

The dynamic application allows users to easily compare their cyber security situation to that of their industry.

To access this application, click here.

To access the microdata of the survey, the usual procedure continues to apply.


Can I freely use the results of the Inquiry?


The survey was conducted by Statistics Canada and sponsored by Defense Research and Development Canada and Public Safety Canada. It is distributed by the Smart Cybersecurity Network (SERENE-RISC) and publication by SERENE-RISC is authorized under the Statistics Canada Open Licence.

Statistics Canada's Open Licence governs the use of most data products and other materials published by Statistics Canada.

This license allows you to use Statistics Canada's information without restriction as to its sharing and redistribution, for commercial and non-commercial purposes.

For more details on this license and its specific terms and conditions:


Who do I contact for more information?