In 2006, RAND conducted the National Computer Security Survey (NCSS), the first nationally representative cybersecurity survey of businesses within the United States on behalf of the Bureau of Justice Statistics and the U.S. Department of Homeland Security. This report documents the methodology used to develop and field the NCSS, as well as the sampling design and weighting methodology used.
