Cyber security among charities

Ipsos was commissioned by the Department for Digital, Culture, Media and Sport to undertake research with UK registered charities to explore their awareness, attitudes and experiences around cyber security, as part of the UK Government’s National Cyber Security Programme.

Ipsos was commissioned by the Department for Digital, Culture, Media and Sport (DCMS) to carry out qualitative research with UK registered charities to explore their awareness, attitudes and experiences around cyber security. The research was undertaken alongside the Cyber Security Breaches Survey 2017, which was a major survey of businesses’ approaches to cyber security.

This is part of the Government’s National Cyber Security Strategy, which aims to make the UK the safest place to live and work online. The research informs the developing work in Government and the National Cyber Security Centre to help organisations in the charitable sector to be secure and resilient online, and able to protect their important data.

Charities can find cyber security advice and support on www.gov.uk and via the National Cyber Security Centre

Findings

The research highlights that Britain’s charities may need to do more to protect themselves from online threats, but also shows the good practice among various charities in making themselves secure.

The research found that charities are just as susceptible to cyber attacks as businesses, with staff often not well informed about the topic. Awareness and knowledge varied considerably across different charities, and those in charge of cyber security, especially in smaller charities, were not often proactively seeking information on the topic, or were relying on outsourced IT providers to deal with threats.

Where charities recognised the importance of cyber security, this was often due to holding personal data on donors or beneficiaries, or having trustees and staff with private sector experience of the issue. The charities interviewed also recognised that the staff responsible for cyber security may need new skills and that general awareness among all staff needed to rise.

Technical details

  • A total of 30 in-depth interviews were undertaken in February and March 2017 with UK registered charities, sampled from the respective Charity Commission databases for England and Wales, Scotland and Northern Ireland.
  • Within each organisation the main person responsible for cyber security was interviewed, which included a mix of Chief Executives, Trustees, Treasurers, Chairs and in some cases more junior staff members.
  • The sample profile included a wide range of charities, by income, location, charitable function, organisational status (including Charitable Interest Organisations, CIOs, as well as charitable trusts), service provision, and past experience of cyber security breaches.
  • The sampling approach excluded unregistered charities (not registered with the Charity Commission) and unincorporated associations. In addition, certain types of registered charities were excluded including private schools or colleges, UK universities, community halls and churches.
  • This research was conducted before the global Wannacry ransomware attack in May 2017. For example, see this news coverage on the BBC News website: http://www.bbc.co.uk/news/technology-39901382

The author(s)

More insights about Public Sector

  • Recycling centre sign
    Evaluations Ipsos Voices

    Tracking Progress: What England's waste data tells us about the road ahead

    Since 2022, Ipsos UK, working with Technopolis and Ricardo and commissioned by Defra, has been looking at the progress made by Defra’s Resource and Waste Policy Programme. Now in its fourth year, the evaluation of the Resource and Waste Policy Programme reveals a nuanced picture: progress is being made, but significant challenges remain for long-term impact to materialise.
  • Food & Diet Publication

    FSA consumer survey, conducted by Ipsos, reveals appetite for healthy and sustainable diets

    Since 2020, Ipsos has been running the FSA’s flagship consumer survey, Food and You 2. Research from the survey, published by the Food Standards Agency reveals the highest level of public confidence in food safety recorded since the start of the project.
  • Group of women
    Gender Ipsos Voices

    International Women's Day 2026: Spotlight Projects in Public Affairs

    As has now become a tradition for our team; to mark International Women’s Day 2026 we have taken the opportunity to reflect on the wide range of policy areas and projects delivered across Public Affairs over the past year. In this third edition, we shine a spotlight on how this work aligns with and advances this year’s theme, “Give to Gain.”

Related news