Does your company use encryption to protect the personal information you store on portable devices, What steps do you take to protect the personal information on your customers? Which of these technological tools do you use? (passwords, firewalls, encryption)

Do you have any controls in place to ensure that employees use hard‐to‐guess passwords? How often do you require employees to change their passwords?

Practices in place to protect privacy, Existence of privacy policy and frequency of update, Perceived difficulty of compliance with Canada's privacy laws, Concern about data breach [information security], % of companies have experienced a security breach

Usefulness of privacy training, Preferred channel for receiving privacy training,

% say that their organizations allow employees to use their personal devices to connect to corporate email, permit access to personal (web-based) email, access to business applications [BYOD], Unacceptable practices - % report using their mobile device to take photos or videos in the workplace, downloading confidential data onto the device, downloading and using internet apps, using personal email accounts, % have experienced an increase in malware [e.g. viruses] infections as a result of personally owned mobile devices used in the workplace. [Information security]

% claim to not currently have secure off-site storage for their critical business data, % do not currently monitor or manage their data on a 24x7 basis

% of Canadian SMB host their data in the cloud, % have not worked with an IT security firm to audit their security practices. [Information security]

% of those affected by customer fraud said this costs their organization $1 million or more annually, % of those affected by employee fraud said their organization loses $1 million or more annually, Top sectors affected. [Information Security]