The cyber-security of organisations is a subject of perennial concern as they are subject to mounting threats in an increasingly digitalised world. While commercial and charitable organizations have been the objects of cyber security research, Social Enterprises have remained unexplored. As Social Enterprises have become increasingly important features of social and economic development, so their prominence as potential targets of cybercrime also increases. In order to address this knowledge gap, this study examines the factors that influence the cyberpreparedness of Social Enterprises in the UK. Through the use of semi-structured interviews with Social Enterprise, these factors are found to comprise the characteristics of the enterprise, the characteristics of the enterprise management, resource constraints, experience of cyber attacks, usage of IT, and awareness of cybersecurity schemes and resources. These insights provide valuable guidance for SE owner-managers, SE support agencies and policy-makers when considering the cyber security of SEs. These findings are of immediate concern to social enterprises but also to other organizations that are engaged in partnerships with them as social enterprises may afford 'gateway' opportunities to those with malicious intent. Managerial Relevance Social Enterprises are institutions that balance the competing needs of commercial success and the primary objective of delivering social value. The management of cyber security places a further demand upon these resource-constrained organizations, and upon the capacity of individual owner-managers. However, the nature of these enterprises suggests that they present unique opportunities to cyber criminals: their association with vulnerable individuals, use of volunteer resources and links with government systems, and rising visibility among the