NCSR End User Survey

OMB Control Number: 1670-NEW
OMB Expiration Date: MM/DD/YYYY

2017 NCSR End User Survey

Paperwork Reduction Act
The public reporting burden to complete this information collection is estimated at 10 minutes per response, including the
time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and the
completing and reviewing the collected information. The collection of information is voluntary. An agency may not
conduct or sponsor, and a person is not required to respond to a collection of information unless it displays a currently
valid OMB control number and expiration date. Send comments regarding this burden estimate or any other aspect of this
collection of information, including suggestions for reducing this burden to DHS/NPPD/CS&C, 245 Murray Lane, SW, Mail
Stop 0612, Arlington, VA 20598-0640 or [email protected] ATTN: PRA [OMB Control No. 1670-NEW].

1. How would you categorize your organization?
State
Local
Territorial
Tribal
State Agency
Fusion Center

1

2017 NCSR End User Survey

2. How did you hear about the Nationwide Cyber Security Review (NCSR)? (Please select all that apply)
Center for Internet Security (CIS) Mailing
Multi-State Information Sharing and Analysis Center (MS-ISAC) Mailing
National Association of Counties (NACo)
National Association of State Chief Information Officers (NASCIO)
Colleague
National Governor Association (NGA)
Social Media
Newsletter
Internet Search
Mandated to Participate
If other, event trade show or seminar, please provide additional information:

2

2017 NCSR End User Survey

3. Would you recommend the NCSR to a public sector colleague?
Yes
No

3

2017 NCSR End User Survey

4. If no, why not?

4

2017 NCSR End User Survey

5. Are you using the NCSR to measure your cybersecurity maturity?
Yes
No

5

2017 NCSR End User Survey

6. If yes, how and/or do you have any additional comments?

6

2017 NCSR End User Survey

7. If no, why not?

7

2017 NCSR End User Survey

8. How are you using the NCSR to measure your cybersecurity maturity?

8

2017 NCSR End User Survey

9. How well do you feel the NCSR measures your cybersecurity maturity?
Extremely well
Quite Well
Moderately well
Slightly well
Not well

9

2017 NCSR End User Survey

10. In what ways do you feel it measures your cybersecurity maturity?

10

2017 NCSR End User Survey

11. Why not?

11

2017 NCSR End User Survey

12. How is your organization utilizing the NCSR reports? (Please select all that apply)
Establish priorities for security program tasks
Education and awareness for security staff
To inform c-level/executive management about security program/resource needs
To see how the organization rates compared to similar organizations?
Currently not using the NCSR reports
If other, please provide more information:

12

2017 NCSR End User Survey

13. Why are you not using the NCSR reports?

13

2017 NCSR End User Survey

14. Do you find the generated reports valuable?
Yes
No

14

2017 NCSR End User Survey

15. Why not?

15

2017 NCSR End User Survey

16. Are the response choices relevant/appropriate to the questions?
Yes
No

16

2017 NCSR End User Survey

17. Outside of the NIST Cybersecurity Framework question set, are there any other categories and/or
areas you'd like to see addressed?
Yes
No

17

2017 NCSR End User Survey

18. If yes, what would you recommend?

18

2017 NCSR End User Survey

19. Do you have any suggestions on how we can improve the NCSR process?
Yes
No

19

2017 NCSR End User Survey

20. If yes, please provide your suggestion:

20

2017 NCSR End User Survey

21. Did you find the additional peer profile reports valuable?
Yes
No
Currently not in any additional peer profiles besides state, local or tribal
Currently not in any peer profile

21

2017 NCSR End User Survey

22. Did you find the HIPAA Security Rule Crosswalk Report valuable?
Yes
No
Not applicable

22

2017 NCSR End User Survey

23. Is your organization planning to participate in the 2018 NCSR?
Yes
No

23

2017 NCSR End User Survey

24. If not, why not?

24

2017 NCSR End User Survey

25. If you would like us to follow up with you regarding any of your comments, please provide your contact
information:
Name
Company
Email Address
Phone Number

25