Province / territory
1 = BC
2 = AB
3 = SK
4 = MB
5 = ON
6 = QC
7 = NB
8 = NS
9 = PE
10 = NL
11 = YK
12 = NT
13 = NU

Which of the following categories best describes your current employment status?
1 = Working full-time (35 or more hours per week)
2 = Working part-time (less than 35 hours per week)
3 = Self-employed
4 = Student attending full time school (not working)
5 = Unemployed, but looking for work
6 = Not in the workforce (for example, unemployed, but not looki
7 = On disability pension
8 = Maternal/parental leave
9 = Retired
77 = Other
99 = Prefer not to say

How many employees are there at all locations in your organization, including those working full and part-time?
999997 = None
999998 = Do not know
999999 = No response

Do you believe the number of employees at all locations in your organization is over or under 100?
1 = Over 100
2 = Under 100
98 = Do not know
99 = No response

Do you have any of the following responsibilities:
1 = Employees who report to you/ you oversee work of other emplo
2 = Involvement in decisions about processes and procedures foll
99 = None of these

Are there any children under the age of 18 currently living in your household?
1 = Yes
2 = No
99 = Prefer not to say

What are the ages of children in the home?
1 = Under 5
2 = 6 to 12
3 = 13 to 15
4 = 16 to 18
5 = 19 to 24
6 = 25 or older
99 = Prefer not to say

1 = 18-24
2 = 25-34
3 = 35-44
4 = 45-54
5 = 55-64
6 = 65 up
9 = NR

In what year were you born?
9999 = Prefer not to say

In which of the following age categories do you belong?
1 = Less than 18 years old
2 = 18 to 24
3 = 25 to 34
4 = 35 to 44
5 = 45 to 54
6 = 55 to 64
7 = 65 or older
99 = No response

Do you take precautions to protect your online accounts, social media accounts, devices, and networks?
1 = Yes
2 = No
98 = Do not know
99 = No response

When it comes to your passwords, which of the following actions do you take?
1 = Keep your passwords simple and easy to remember
2 = Make your passwords complex with a combination of letters, n
3 = Use a passphrase with at least 4 words and 15 characters
4 = Use the same password for multiple accounts
5 = Use a different, unique password for each account
6 = Share a password with others
7 = Write down your passwords
8 = Use a password manager
9 = Allow your browser or an app to remember/ store your passwor
77 = Other
98 = None of these
99 = Do not know

Which of the following authentication factors have you used?
1 = Passwords
2 = Passphrases
3 = PINs
4 = Code received by email
5 = Code received by text message
6 = Code received by phone call
7 = Code received by an authentication application
8 = Smart cards
9 = USB drives
10 = Token devices
11 = Fingerprints
12 = Facial recognition
13 = Voice verification
77 = Other
98 = Do not know
99 = No response

Devices often prompt you to update the operating system (OS). When do you enable this update?
1 = Automatically
2 = Within a day/daily
3 = Within a week/weekly
4 = Within a month/monthly
5 = Less than once per year
6 = Never
98 = Do not know
99 = No response

Do you secure your home Wi-Fi with a unique password?
1 = Yes
2 = No
3 = Do not have Wi-Fi at home
98 = Do not know
99 = No response

Was the password you used the default one that came with the device (e.g. a router) or is it a new one you created yourself?
1 = Yes, default password
2 = No, I created it myself
98 = Do not know
99 = No response

Thinking about data storage of information for personal use, do you save information on your computer hard drive, an external hard drive (i.e., extra storage / back up), or on a "virtual server" (i.e., cloud computing)?
1 = Save files on computer hard drive
2 = Save files to an external hard drive
3 = Save files on a "virtual server"/in a cloud
99 = Do not know

How often do you back up data/personal files stored on your computer, smartphone or other mobile device?
1 = Never
2 = Once or twice a year
3 = Every few months
4 = Once a month
5 = A few times a month
6 = Weekly or more often
7 = Automatically (e.g. as the files are created) to the cloud
99 = Do not know

In the past month, have you ...
1 = Opened an email attachment from an unknown source
2 = Clicked on a link from an unknown email or text message
3 = Forwarded an email from an unknown sender
4 = Entered personal information on an unsecure site
5 = Entered personal information on a public computer
6 = Entered financial information while using public Wi-Fi
7 = Replied to a phishing/spoofing or spam email unknowingly
97 = None of these
98 = Do not know

As far as you know, what are signs of phishing?
1 = Uses urgent or threatening language
2 = Requests sensitive information, such as financial or identif
3 = Has offers that are too good to be true
4 = Claims to be about accounts you don't have or deliveries you
5 = Contains incorrect sender email addresses, unfamiliar links,
6 = Includes unexpected or unnecessary attachments, that may hav
7 = Includes unprofessional graphic design, with pixelated image
77 = Other
97 = None of these
98 = Do not know

What steps do you take to verify that a website is secure?
1 = Only use websites that I know well
2 = Website is from a trustworthy source (e.g. well known Intern
3 = The website uses has an "https" address
4 = The website has a checkmark or VeriSign authentication
5 = Displays security lock symbol
6 = Conduct research as to whether site is legitimate/safe
7 = Use whois
8 = Read comments about privacy/reputation
9 = Impossible: cannot fully know/know for sure
10 = Difficult to guarantee: any site can be hacked
77 = Other
98 = None of these
99 = Do not know

...causing your personal information to be compromised?
1 = 1 Not at all likely
2 = 2
3 = 3 Moderately likely
4 = 4
5 = 5 Extremely likely
99 = Do not know

Why don't you think that it is likely that you will be affected by a cyber threat?
1 = Take steps to protect ourselves online
2 = Do not do anything risky online
3 = Think the chances are just very small
4 = Online threats only apply to businesses and people with a lo
5 = Stay up to date/knowledgeable/educated about information/vir
6 = Work in computer/information technology
7 = Use Apple/iOS which is not as susceptible to viruses
8 = Use Linux which is not as susceptible to viruses
9 = Do not use Microsoft OS
77 = Other
99 = Do not know

What kinds of cyber threats are you most concerned about?
1 = Phishing scams
2 = Viruses/spyware/malware
3 = Identity theft
4 = Privacy violations
5 = Financial loss
6 = Personal or financial data held for ransom (Ransomware)
7 = Loss of information/files
8 = Personal data erased/ changed/ lost
77 = Other
98 = None of these
99 = Do not know

How well prepared are you to face cyber threats?
1 = Not at all prepared
2 = Not prepared
3 = Somewhat prepared
4 = Prepared
5 = Very well prepared
99 = Do not know

Why is that?
1 = I don't think it's likely to happen to me
2 = I don't have the time/ never get around to it
3 = I don't know what the different type of threats are
4 = I don't know where to get information about the steps to tak
5 = The information I find is not straightforward enough to help
6 = You can never really protect yourself online
7 = There's no point in trying
8 = I have a back up and can recover
9 = Nothing
77 = Other
99 = Do not know

Have you ever been a victim of any of the following cyber attacks?
1 = Email scam
2 = Text scam
3 = Virus/spyware/malware on your computer
4 = Identity theft
5 = Social media account hack
6 = Phishing
7 = Ransomware
97 = None of these
98 = Do not know
99 = No response

If you knew or suspected that you'd been a victim of a cyber attack, what steps would you take to protect yourself?
1 = Shutdown my computer
2 = Delete suspicious material (email, text, downloaded content,
3 = Update my security software
4 = Change my passwords
5 = Contact my bank
6 = Contact Canada's main credit agencies (Trans Union, Equifax)
7 = Contact an IT specialist
8 = Contact a friend or family member for help
9 = Call the police
10 = Nothing
11 = Disconnect all devices that are connected to your network
12 = DEPENDS ON THE SEVERITY OF THE SITUATION, DEPENDS ON WHO/WHE
14 = RESTORE SETTINGS/RESTART IN SAFE MODE/FACTORY DEFAULTS, RE-I
77 = Other
99 = Do not know

How do you prefer to get information to protect yourself from cyber threats?
1 = Podcasts
2 = Blogs
3 = Fact sheets or infographics
4 = Check lists on what to do
5 = Instructional videos
6 = Stories of how people have been affected
7 = Information on websites
8 = Print brochures
9 = Newsletter (e.g. an email subscription)
10 = Social media
11 = IT EXPERT
12 = GENERAL MEDIA SOURCES (RADIO, TV, PSAS, NEWS/NEWSPAPERS...)
14 = SECURITY SOFTWARE/ISP INFORMATION SOURCES
15 = WORK/EMPLOYER TRAINING AND INFORMATION UPDATES
77 = Other
97 = None of these
99 = Do not know

Have you ever looked for the following types of cyber security information?
1 = How to tell if an email is a scam
2 = Steps you can take to use public wifi safely
3 = Steps you can take to use social networking sites safely
4 = Securing your home Wi-Fi
5 = Steps you can take to protect other internet connected devic
6 = How to protect your mobile devices
7 = Cyber security advice for children
8 = Cyber security advice for seniors
9 = Information about types of cyber security threats (e.g. phis
77 = Other
98 = None of these
99 = Do not know

Where did you find that information?
1 = Search engine
2 = Web site of software or hardware vendor
3 = Friends and family
4 = Media (e.g. news organizations' website)
5 = Website of a non-profit group
6 = Newsletter
7 = Government website
8 = Law enforcement website
9 = My employer's IT department
10 = Social media
11 = YouTube
77 = Other
99 = Do not know

What was it about this information that made it helpful?
1 = I had confidence in the source of the information
2 = Practical guide, with specific and detailed examples
3 = It covered exactly the topics I wanted to know about
4 = It was clear and straightforward (easy to understand)
5 = It was easy to find
77 = Other
97 = Nothing
99 = Do not know

How often do you work from home?
1 = Part time
2 = Full time
3 = As needed
4 = Never
8 = Do not know
9 = No response

Have you been given any specific instructions or requirements by your employer to protect the organization from cyber threats?
1 = Yes
2 = No
8 = Do not know
9 = No response

If yes, what type of instructions or requirements have you been given by your employer?
1 = Keep security software up-to-date on all machines
2 = Set spam filters
3 = Require password protection on all devices
4 = Back up information on all devices
5 = Use encryption software
6 = Do not use administrator account when accessing the web
7 = Use a password or user authentication for wireless and remot
8 = Follow information removal protocols when employees leave th
9 = Providing cyber security best practices training for employe
10 = Adopting a cyber security policy for employees
97 = None of these
98 = Do not know
99 = Prefer not to say

It's up to individuals to protect their own personal privacy.
1 = 1 Strongly disagree
2 = 2
3 = 3
4 = 4 Neither
5 = 5
6 = 6
7 = 7 Strongly agree
99 = Do not know

Who would you trust to give you the best technically reliable and up-to-date information about online threats and steps you can take to protect yourself?
1 = Friends or family
2 = Internet Service Provider
3 = Security software company
4 = Financial Institutions
5 = Vendor website (e.g. online store where you are shopping, et
6 = Not-for-profit organization dedicated to electronic security
7 = Government
8 = Law enforcement organization
9 = IT PERSONEL/COMPUTER/SECURITY TECHNICIAN, COMPUTER CONSULTAN
10 = COMPUTER STORE/VENDOR, RETAIL OUTLETS/SOFTWARE VENDOR, GEEK
11 = ON LINE SOURCES (E.G:FORUMS/BLOGS/PODCASTS/WEBSITES/ONLINE A
12 = TELEVISION, MAGAZINES, NEWSPAPERS, RADIO
13 = COMPUTER MANUFACTURER
14 = THROUGH WORK, MY EMPLOYER, WORK EMPLOYEES
15 = MYSELF
16 = NO ONE, THESE SOURCES ARE THE PROBLEM, NONE OF THE ABOVE
77 = Other
98 = Do not know
99 = No response

Which of the following instructions do you provide to employees to protect the organization against cyber threats and to protect personal information?
1 = To use passwords that contain random numbers and letters tha
2 = To check privacy policies on the website
3 = To read terms of service/use of a website, app or social med
4 = To change my default password
5 = Not to give out password without calling to verify that the
6 = To only download from trusted sources
7 = To only click on attachments or URLs from trusted sources
8 = Not to allow my computer browser to remember passwords for w
9 = To use caution when responding to solicitations from strange
10 = To use of encryption software
97 = None of these
98 = Do not know
99 = Prefer not to say

Does your organization have employees who work from home, even some of the time?
1 = Yes
2 = No
98 = Do not know
99 = Prefer not to say

What additional instructions or requirements do you have for employees who work from home to protect the organization against cyber threats?
1 = Use VPN
2 = Use firewall
3 = Use anti-virus software
4 = Use application allow listing
5 = Have policies and procedures in place
6 = Ensure your employees know who to contact
7 = Train employees on cyber security issues and best practices
8 = Use multi-factor authentication.
9 = Use password-enabled screensavers.
10 = Update and patch.
11 = Turn off Bluetooth or Wi-Fi when not in use
12 = Back up information
13 = Encrypt information
14 = Apply the principle of least privilege
97 = Do not have any additional instructions or requirements for
98 = Do not know
99 = No response

Which of the following types of information do you feel that your organization would benefit from having in order to protect itself against cyber threats?
1 = A list of the types of threats that exist and cues to look f
2 = Tips on communicating the importance of following cyber secu
3 = Best practices for a clear internet usage policy
4 = Guidelines to establish rules for safe email usage policies
5 = Guidelines on how to establish strong social media policy
6 = Tips/resources for the type of software/hardware to make net
7 = Best practices for employees on how to handle passwords
8 = Steps to protect mobile devices in a public setting
9 = Steps for handling work-related information possessed by dep
10 = Guidelines for reacting to a cyber attack
11 = Best practices for safe cloud computing (with definition of
12 = Best practices for use of storage devices (e.g. USBs)
13 = Resources on how to encrypt computers, laptops, and storage
14 = Guidelines on use of personal devices for work
77 = Other
97 = None of these
98 = Do not know
99 = Prefer not to say

Who is responsible for your company's IT?
1 = Me
2 = Another employee
3 = An employee of the organization dedicated to IT
4 = Outsource to an IT firm
5 = No one
77 = Other
97 = None of these
98 = Do not know
99 = Prefer not to say

...cause work disruptions?
1 = 1 Not at all concerned
2 = 2
3 = 3
4 = 4 Moderately concerned
5 = 5
6 = 6
7 = 7 Extremely concerned
98 = Do not know
99 = Prefer not to say

Why is this?
1 = I never really thought about it
2 = I don't know what the issues are to be concerned about
3 = We have researched this and taken steps to protect ourselves
4 = The threat for a company like ours is very low
5 = There are bigger issues to worry about than cyber attacks
6 = You can't really protect yourselves against cyber attacks -
77 = Other
97 = None of these
98 = Do not know
99 = Prefer not to say

How well would your organization be able to recover from a ransomware attack?
1 = 1 With great difficulty and hardship
2 = 2
3 = 3
4 = 4 With some effort, but recover reasonably well
5 = 5
6 = 6
7 = 7 Easily, with limited impact
98 = Do not know
99 = Prefer not to say

There is a Government of Canada awareness campaign created to inform Canadians about cyber security and the simple steps they can take to protect themselves online. Can you name this campaign?
2 = No
77 = Yes
98 = Do not know
99 = No response

Have you seen, heard or read anything from the Government of Canada with the title Get Cyber Safe that talked about online threats and how to protect yourself?
1 = Yes
2 = No
99 = Do not know

Where did you see, hear, or read this?
1 = Visited the GetCyberSafe.ca website
2 = Heard about it through a radio show, podcast
3 = Read about it on social media
4 = Saw an online video
5 = Someone told me about it
6 = Saw a segment on the news or in the newspaper
77 = Other
99 = Do not know

With which gender do you identify?
1 = Male
2 = Female
77 = Prefer to self-identify
99 = Prefer not to say

What is the highest level of formal education that you have completed to date?
1 = Elementary school or less
2 = Secondary school
3 = Some post-secondary
4 = College, vocational or trade school
5 = Undergraduate university program
6 = Graduate or professional university program
99 = Prefer not to say

Which of the following categories best describes your total household income? That is, the total income of all persons in your household, before taxes?
1 = Under $20,000
2 = $20,000 to just under $40,000
3 = $40,000 to just under $60,000
4 = $60,000 to just under $80,000
5 = $80,000 to just under $100,000
6 = $100,000 to just under $150,000
7 = $150,000 and above
99 = Prefer not to say

Total
1 = Total

Language of completion
1 = EN
2 = FR