CISO Survey

Question Title

* 1. Are you one of the senior executives responsible for cyber security in your organization?

Yes

Question Title

* 2. How long have you been in a senior security executive role?

Less than one year

One to three years

Three to seven years

Seven to ten years

Ten years or more

Question Title

* 3. Where is your organization headquartered?

U.S.

Europe

Asia

Australia/ New Zealand

Other (please specify)

Question Title

* 4. How confident are you in the U.S. Federal government’s ability to meaningfully address the following cybersecurity challenges over the next 12 - 24 months?

	Very confident	Somewhat confident	Not confident
AI	AI Very confident	AI Somewhat confident	AI Not confident
Open source software	Open source software Very confident	Open source software Somewhat confident	Open source software Not confident
Cyber security insurance market regulation	Cyber security insurance market regulation Very confident	Cyber security insurance market regulation Somewhat confident	Cyber security insurance market regulation Not confident
Ransomware	Ransomware Very confident	Ransomware Somewhat confident	Ransomware Not confident
Software supply chain security	Software supply chain security Very confident	Software supply chain security Somewhat confident	Software supply chain security Not confident
Cyber security workforce	Cyber security workforce Very confident	Cyber security workforce Somewhat confident	Cyber security workforce Not confident
Privacy regulation	Privacy regulation Very confident	Privacy regulation Somewhat confident	Privacy regulation Not confident

Question Title

* 5. In your opinion, will the U.S. Federal government make substantive progress on the cyber security challenges facing our nation over the next 12 – 24 months?

The situation is changeable and I’m optimistic

The situation is changeable but I’m pessimistic

The situation is changeable but I have no confidence in the U.S. Federal Government’s ability to drive meaningful change

The situation is not changeable

Question Title

* 6. Who should be held responsible for security breaches of critical infrastructure in the private sector?

The entire senior management team including the CEO, the CIO and the Board

The Board

The CISO

Other (please specify)

Question Title

* 7. How helpful is the threat intelligence information currently shared by the U.S. Federal government?

Extremely helpful

Somewhat helpful; it's improved recently

Marginally helpful but most of the intelligence isn't actionable

Not at all helpful

Question Title

* 8. How effective are U.S. Federal cyber security regulations in measurably improving security at your organization?

Extremely helpful

Somewhat helpful

Marginally helpful

Not at all helpful

Question Title

* 9. What are the most critical issues with current U.S. Federal cyber security regulations?

	Very critical	Somewhat critical	Not critical
Regulations focus on obsolete technology.	Regulations focus on obsolete technology. Very critical	Regulations focus on obsolete technology. Somewhat critical	Regulations focus on obsolete technology. Not critical
Regulations from multiple agencies make compliance expensive and difficult.	Regulations from multiple agencies make compliance expensive and difficult. Very critical	Regulations from multiple agencies make compliance expensive and difficult. Somewhat critical	Regulations from multiple agencies make compliance expensive and difficult. Not critical
Lack of Federal standard for data breach reporting makes reporting too complex.	Lack of Federal standard for data breach reporting makes reporting too complex. Very critical	Lack of Federal standard for data breach reporting makes reporting too complex. Somewhat critical	Lack of Federal standard for data breach reporting makes reporting too complex. Not critical
Lack of Federal standard for privacy violations is creating a patchwork of state laws making compliance too complex.	Lack of Federal standard for privacy violations is creating a patchwork of state laws making compliance too complex. Very critical	Lack of Federal standard for privacy violations is creating a patchwork of state laws making compliance too complex. Somewhat critical	Lack of Federal standard for privacy violations is creating a patchwork of state laws making compliance too complex. Not critical

Question Title

* 10. Are you considering or open to leaving your current position over the next 12 - 24 months?

Yes

Question Title

* 11. If you are considering leaving your current position, please rank the factors that would contribute to this decision.

	Very important	Important	Contributing factor	Not important
Stress	Stress Very important	Stress Important	Stress Contributing factor	Stress Not important
Work/life balance	Work/life balance Very important	Work/life balance Important	Work/life balance Contributing factor	Work/life balance Not important
Lack of resources	Lack of resources Very important	Lack of resources Important	Lack of resources Contributing factor	Lack of resources Not important
Lack of support from senior management and the board	Lack of support from senior management and the board Very important	Lack of support from senior management and the board Important	Lack of support from senior management and the board Contributing factor	Lack of support from senior management and the board Not important