In 2006, RAND conducted the National Computer Security Survey (NCSS), the first nationally representative cybersecurity survey of businesses within the United States on behalf of the Bureau of Justice Statistics and the US Department of Homeland Security. This report documents the survey's methodology.