current language -- Language used in the survey
1 = (1) English
2 = (2) French

region -- Region
1 = (1) Atlantic
2 = (2) Quebec
3 = (3) Ontario
4 = (4) Manitoba
5 = (5) Saskatchewan
6 = (6) Alberta
7 = (7) British Columbia + Territories

age1 -- Age group 1
1 = (1) 18-24
2 = (2) 25-34
3 = (3) 35-44
4 = (4) 45-54
5 = (5) 55-64
6 = (6) 65+

age2 -- Age group 2
1 = (1) 18-34
2 = (2) 35-44
3 = (3) 45-64
4 = (4) 65+

generation -- Generation
-8 = (-8) Prefer not to answer
1 = (1) Gen Z: 1997-2006
2 = (2) Millennials: 1981-1996
3 = (3) Gen X: 1965-1980
4 = (4) Baby Boomers: 1946-1964
5 = (5) Silent: 1928-1945

gender -- Gender
1 = (1) Man
2 = (2) Women
3 = (3) Another gender

Business -- Business
1 = (1) Business owner
2 = (2) Supervisor/manager
3 = (3) Non-business

s1 -- In what year were you born?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped

s2 -- Are you at least 18 years of age?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Yes
2 = (2) No

s3 -- In which age category do you belong?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Less than 18 years old
2 = (2) 18 to 24
3 = (3) 25 to 34
4 = (4) 35 to 44
5 = (5) 45 to 54
6 = (6) 55 to 64
7 = (7) 65 or older

s4 -- How frequently do you use the internet? This means being on an internet-connected device using apps or websites.
-7 = (-7) Skipped
1 = (1) A few times per month
2 = (2) Once a week
3 = (3) A few times per week
4 = (4) A few times a day
5 = (5) I'm always connected
6 = (6) Less than a few times a month

s5 -- On average, how many hours per week are you online? This means being on an internet-connected device using apps or websites.
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) Less than 10 hours
2 = (2) 10 or more hours

s6 -- In which province or territory do you currently live?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Alberta
2 = (2) British Columbia
3 = (3) Manitoba
4 = (4) New Brunswick
5 = (5) Newfoundland and Labrador
6 = (6) Northwest Territories
7 = (7) Nova Scotia
8 = (8) Nunavut
9 = (9) Ontario
10 = (10) Prince Edward Island
11 = (11) Quebec
12 = (12) Saskatchewan
13 = (13) Yukon

s7 -- Which of the following categories best describes your current employment status? Are you...?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Working full-time, that is, 35 or more hours per week
2 = (2) Working part-time, that is, less than 35 hours per week
3 = (3) Self-employed
4 = (4) Unemployed, but looking for work
5 = (5) A student attending school full-time
6 = (6) Retired
7 = (7) Not in the workforce (Full-time homemaker, unemployed, not looking for work)
8 = (8) Other

s8 -- How many employees work for your company?
-9 = (-9) Do not know
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Less than 5
2 = (2) 5-9
3 = (3) 10-49
4 = (4) 50-100
5 = (5) 101-249
6 = (6) 250-499
7 = (7) 500 or more

s10_1 -- Employees report to you : Do you have any of the following responsibilities?
-9 = (-9) Don't know
-8 = (-8) Refused
-7 = (-7) Skipped
0 = (0) Not selected
1 = (1) Selected

s13 -- What is your level of online security knowledge?
-7 = (-7) Skipped
1 = (1) Advanced
2 = (2) Intermediate
3 = (3) Basic
4 = (4) Novice/Beginner
5 = (5) I don't have any knowledge about staying secure online.

qcs1_a -- I find it easy to be secure when I'm online. : How much do you agree with the following statements about online security?
-7 = (-7) Skipped
1 = (1) 1-Strongly disagree
2 = (2) 2
3 = (3) 3
4 = (4) 4
5 = (5) 5
6 = (6) 6
7 = (7) 7
8 = (8) 8
9 = (9) 9
10 = (10) 10-Strongly agree

qcs2 -- Who do you rely on most for cybersecurity help or advice?
-7 = (-7) Skipped
1 = (1) My family (e.g. spouse, child, relatives)
2 = (2) My friends
3 = (3) My work colleague(s)
4 = (4) The government (e.g. government websites)
5 = (5) IT companies (e.g. tech support companies or the seller of the related device)
6 = (6) Other (Please Specify)

qcs2 -- OTHER - Who do you rely on most for cybersecurity help or advice?
1 = No-one

qcs3_a -- Getting advice and information on how to be secure online. : How much do you rely on other people (e.g. family, friends or colleagues) for help to perform the following things?
-7 = (-7) Skipped
1 = (1) 1- Not reliant at all
2 = (2) 2
3 = (3) 3
4 = (4) 4
5 = (5) 5
6 = (6) 6
7 = (7) 7
8 = (8) 8
9 = (9) 9
10 = (10) 10- Fully reliant

qcs5 -- How confident are you in your ability to identify a phishing message or a malicious link?
-7 = (-7) Skipped
1 = (1) 1-Not at all confident
2 = (2) 2
3 = (3) 3
4 = (4) 4
5 = (5) 5
6 = (6) 6
7 = (7) 7
8 = (8) 8
9 = (9) 9
10 = (10) 10-Very confident

qbeh1 -- These next questions focus on cyber security measures. Do you take precautions to protect your online accounts, social media accounts, devices, or networks?
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) Yes
2 = (2) No

qbeh2 -- Do you know how to install the latest software and app updates across your devices (e.g. computer and mobile phone)?
-7 = (-7) Skipped
1 = (1) I don't know how to do this.
2 = (2) I know how to, but I don't do it.
3 = (3) I know how to do this and do it.

qbeh3 -- How often do you install the latest software or application updates to your devices when notified that they were available?
-7 = (-7) Skipped
1 = (1) Never
2 = (2) Rarely
3 = (3) Sometimes
4 = (4) Very often
5 = (5) Always

qbeh4 -- When do you typically install software updates on your devices?
-7 = (-7) Skipped
1 = (1) I have turned on automatic updates.
2 = (2) Immediately when I receive the notification.
3 = (3) After clicking on ‘remind me later' a few times.
4 = (4) Whenever I am away from or not using my device (e.g. during the night).

qbeh6 -- Have you ever heard of multi-factor authentication (MFA)? Also known as Two-Factor or Two-Step Verification.
-7 = (-7) Skipped
1 = (1) Yes
2 = (2) No

qbeh7 -- You mentioned you have heard about multi-factor authentication (MFA). Do you know how to use it?
-7 = (-7) Skipped
1 = (1) I don't know how to use it.
2 = (2) I know how to, but I don't use it.
3 = (3) I know how to, but I stopped using it.
4 = (4) I know how to and use it regularly.

qbeh8 -- What is the main reason you don't use (or stopped using) multi-factor authentication (MFA)?
-7 = (-7) Skipped
1 = (1) MFA takes too long.
2 = (2) I don't carry my phone with me all the time to be able to verify.
3 = (3) I don't see MFA adding any extra protection.
4 = (4) My password alone is strong enough.
5 = (5) I don't have a reliable phone/Wi-Fi signal all the time to be able to verify.
6 = (6) I regularly lose the device I use for MFA verification.
7 = (7) Other (please specify)
8 = (8) No reason in particular; I just don't.

qbeh14 -- How often do you check messages (e.g. emails, texts, or social media) for signs of phishing before clicking any links or responding to them?
-7 = (-7) Skipped
1 = (1) Never
2 = (2) Rarely
3 = (3) Sometimes
4 = (4) Very often
5 = (5) Always
6 = (6) I don't know how to identify phishing messages.

qbeh17 -- How often do you use unique passwords for your important online accounts (e.g. emails, social media, payment-related sites )? ‘Unique' means completely different, not just changing a character or two.
-7 = (-7) Skipped
1 = (1) All of the time
2 = (2) A majority of the time
3 = (3) Half of the time
4 = (4) A minority of the time
5 = (5) None of the time

qbeh18 -- You mentioned that you rarely, if at all, use unique passwords for your online accounts. What is the main reason you don't do this?
-7 = (-7) Skipped
1 = (1) It is too time-consuming to create them
2 = (2) They are difficult to remember
3 = (3) It requires too much effort
4 = (4) I don't know how to create them
5 = (5) I only use them for accounts where I want increased security.
6 = (6) Other, please specify

qbeh21 -- How long are the password(s) you usually create?
-7 = (-7) Skipped
1 = (1) 6 characters or less
2 = (2) 7-8 characters
3 = (3) 9-11 characters
4 = (4) 12-15 characters
5 = (5) 16 characters or longer

qbeh22 -- What is your preferred method of remembering multiple passwords?
-7 = (-7) Skipped
1 = (1) I write them down in a notebook.
2 = (2) I write them down in a document on my computer (electronic format).
3 = (3) I store them in my phone.
4 = (4) I store them in my email.
5 = (5) I remember them (without writing them down).
6 = (6) I save passwords in the browser (e.g. Google Chrome or Firefox).
7 = (7) I use a password manager application (e.g. 1Password, LastPass, iCloud keychain).
8 = (8) I just reset them each time I need to log in.

qcce1_r -- Online scam victim
1 = (1) Yes
2 = (2) No

qcce3 -- What is the main reason you reported a phishing scam? If you have lost money/data more than once, please think about the most recent time this happened.
-7 = (-7) Skipped
1 = (1) It is important to notify the relevant authorities so this doesn't happen to me or other people.
2 = (2) I wanted to take action to get my money back.
3 = (3) I wanted the cybercriminals to be caught.
4 = (4) Other, please describe

qcce4 -- What is the main reason you didn't report the phishing scam?
-7 = (-7) Skipped
1 = (1) I didn't have the time.
2 = (2) I didn't know who to report it to.
3 = (3) I didn't know how to report it.
4 = (4) The process was too much effort (couldn't be bothered).
5 = (5) There was no point as no action would have been taken.
6 = (6) I forgot.
7 = (7) I was too ashamed to have fallen for the scam.
8 = (8) The amount of money/data lost was too small or unimportant to me.
9 = (9) Other, please specify

qct1_r -- Potential cybercrime victim
1 = (1) Likely to be affected (4-5)
2 = (2) Not likely to be affected

qct1_a -- ...causing your personal information to be compromised? : In the next year, how likely do you think it is that you will be affected by a cyber threat ...
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) 1 - Not at all likely
2 = (2) 2
3 = (3) 3 - Moderately likely
4 = (4) 4
5 = (5) 5 - Extremely likely

qct4 -- How well prepared are you to face cyber threats?
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) Not at all prepared
2 = (2) Not prepared
3 = (3) Somewhat prepared
4 = (4) Prepared
5 = (5) Very well prepared

qct6_r -- Cyberattack victim
-9 = (-9) Don't know
1 = (1) Yes
2 = (2) No

qct8 -- Do you think you are vulnerable to a ransomware attack? Ransomware is a type of malware that blocks access to the victim's personal data unless a sum of money (i.e., a ransom) is paid.
-7 = (-7) Skipped
1 = (1) Yes
2 = (2) No
3 = (3) I don't know if I'm vulnerable to a ransomware attack.
4 = (4) I don't know what a ransomware attack is.

qai1 -- These next questions are about Artificial Intelligence (AI). Do you use any Artificial Intelligence (AI) tools (For example: ChatGPT, CoPilot, DALL-E) at home or at work?
-7 = (-7) Skipped
1 = (1) Yes, at home only.
2 = (2) Yes, at work only.
3 = (3) Yes, both at work and home.
4 = (4) No, I don't use any AI tools.

qai3 -- How confident are you in your ability to recognize AI-generated content (e.g. messages, pictures, videos, deepfakes)?
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) 1-Not at all confident
2 = (2) 2
3 = (3) 3
4 = (4) 4
5 = (5) 5
6 = (6) 6
7 = (7) 7
8 = (8) 8
9 = (9) 9
10 = (10) 10-Very confident

qbus4_a -- ...cause work disruptions? : Thinking about the daily operations of your company, how concerned are you that a cyber threat will...
-9 = (-9) I don't know
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) 1- Not at all concerned
2 = (2) 2
3 = (3) 3
4 = (4) 4 - Moderately concerned
5 = (5) 5
6 = (6) 6
7 = (7) 7 - Extremely concerned

qbus5 -- How would you rate your company's current level of readiness to defend against ransomware attacks?
-9 = (-9) I don't know
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) 1 - Not at all prepared
2 = (2) 2
3 = (3) 3
4 = (4) 4 - Moderately prepared
5 = (5) 5
6 = (6) 6
7 = (7) 7 - Extremely prepared

qbus7 -- How well would your company be able to recover from a ransomware attack?
-9 = (-9) I don't know
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) 1 - With great difficulty and hardship
2 = (2) 2
3 = (3) 3
4 = (4) 4 - With some effort, but recover reasonably well
5 = (5) 5
6 = (6) 6
7 = (7) 7 - Easily, with limited impact

qinfo1_a -- I have enough information on how to take steps to protect myself and my devices against cyber threats. : Please rate the degree to which you agree with the following statements
-9 = (-9) I don't know
-7 = (-7) Skipped
1 = (1) 1- Strongly disagree
2 = (2) 2
3 = (3) 3
4 = (4) 4- Neither
5 = (5) 5
6 = (6) 6
7 = (7) 7- Strongly agree

qgcs2_code -- (Coded) What is the name of the campaign?
-7 = (-7) Skipped
1 = (1) Correctly named the campaign
2 = (2) Did not correctly name the campaign

d1 -- These last questions are about you and will be used strictly for statistical purposes to understand the results of the survey. How do you identify your gender?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Man
2 = (2) Woman
3 = (3) I identify as another gender

d2 -- What is the highest level of formal education that you have completed to date?
-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Elementary school or less
2 = (2) Secondary school
3 = (3) Some post-secondary
4 = (4) College, vocational or trade school
5 = (5) Undergraduate university program
6 = (6) Graduate or professional university program

-8 = (-8) Prefer not to answer
-7 = (-7) Skipped
1 = (1) Under $20,000
2 = (2) $20,000 to just under $40,000
3 = (3) $40,000 to just under $60,000
4 = (4) $60,000 to just under $80,000
5 = (5) $80,000 to just under $100,000
6 = (6) $100,000 to just under $150,000
7 = (7) $150,000 and above