Practitioner Survey Information Sheet

Information Sheet for Research Study
Principal Investigator: Julie Haney, National Institute of Standards and Technology (NIST)
Study Title: Exploring Human-Centered Cybersecurity Research-Practitioner Interactions:
Practitioner Survey
Study Site(s): Online survey

You are invited to participate in a research study. Your participation is voluntary. This
document explains information about this study. You should read the information below
and ask questions about anything that you do not understand. A researcher will be able and
available to answer your questions.
PURPOSE
The purpose of this study is to understand current human-centered security researcherpractitioner interaction points and associated challenges throughout the entire research
lifecycle. Study insights can inform the creation of bridges between human-centered
security researchers and cybersecurity practitioners. We are conducting an online,
anonymous survey of practitioners. We are asking you to take part in this research study
because you are an adult (18+ years of age) who has a job that involves developing,
administering, implementing, or overseeing security-related technologies, systems,
processes, training, policies, services, programs or the security components of those.
PARTICIPANT INVOLVEMENT
If you decide to take part in this study you will be asked to complete an online, anonymous
survey. The survey has an expected completion time of seven (7) minutes. During the
survey, you will be asked about your professional experience, your current organization,
and your familiarity with and consideration of human-centered security in your work. You
will not be compensated for your participation.
CONFIDENTIALITY
The members of the research team, NIST Research Protections Office (RPO) to include the
Institutional Review Board (IRB), and the Office for Human Research Protections (OHRP)
may access the data. The IRB reviews and monitors research studies to protect the rights
and welfare of you, the research subject.
Your information is strictly anonymous. No identifiers, data, or information are collected
that can be traced back to you. The data provided is not associated or linked back to you by
anyone, including the researchers.

1

When the results of the research are published or discussed in conferences or journals, no
identifiable information will be used. Results will be reported in aggregate.
POSSIBLE RISKS
This research is considered to be minimal risk. That means that the risks associated with
this study are the same as what you face every day. There are no known additional risks to
those who take part in this study. There is a very small risk that someone who is not
authorized could get access to the data. However, data will be anonymized and not linked
back to you. Data will be stored on protected NIST computers and servers requiring multifactor authentication. Data will be retained per NIST record-keeping requirements for five
(5) years after the study is closed.
INVESTIGATOR CONTACT INFORMATION
If you have any questions about this study, please contact Julie Haney at
[email protected].
RPO/ IRB CONTACT INFORMATION
If you have any questions about your rights as a research participant, please contact the
NIST Research Protections Office and/or Institutional Review Board at 301-975-5445 or
email [email protected].
You should only decide to participate if the following is true for you:
I understand the above description of the research and the risks and benefits associated
with my participation as a research subject. I understand that by proceeding to the next
page, I am choosing to take part in this research voluntarily with this survey.

DO NOT SIGN THIS INFORMATION SHEET.
PLEASE KEEP IT FOR YOUR RECORDS.

2