The purpose of this research was to better understand the landscape of where small businesses are at in terms of cybersecurity. In particular, awareness of cyber security, attitudes to cyber security, actions and intentions around cyber security, the extent to which small businesses are trading online and how COVID-19 has impacted online trading.

Key findings:

1. Cyber security is on the radar of small businesses, but a notable minority lack the motivation to act, and there is a recognition they should be doing more.
2. There is a broad lack of understanding of cyber security amongst small business decision-makers. Around one in three businesses across the two waves say they have at least a good understanding of cyber security. A further 47% say they have a basic understanding.
3. There is evidence that many small businesses lack the capability to keep their businesses cyber secure. Online businesses are likely to rely on their website provider to keep the site safe.