cp -pR does the honours, preserves security.

Note that that's GNU cp. Proprietary UNIX upholds the tenet that "if it don't suck ass, it ain't worth paying for", and cheerfully trashes the security.