Caution: JavaScript execution is disabled in your browser or for this website. You may not be able to answer all questions in this survey. Please, verify your browser parameters.

Academic Research Survey: From Victim to Victor - Analyzing Effective Cybersecurity Controls Post-Ransomware Attack

I am inviting you to participate in a research study about how technical leaders at SMEs (small and medium enterprises) respond to ransomware attacks. I am interested in understanding which cybersecurity controls (administrative, technical, and physical) were modified after a ransomware attack, and if they prevented additional infections.

Capitol Technology University
Informed Consent to Participate in Research


Study title: 
From Victim to Victor: Analyzing Effective Cybersecurity Controls Post-Ransomware Attack


Researcher: 
Michael Wideman


What is the purpose of this study:
This study aims to identify which post-ransomware security controls enable sustained resilience in small and medium-sized enterprises by analyzing control adaptations after ransomware incidents.


What will I do?
If you choose to participate, you will be asked to complete a short survey. You may stop your participation at any time.  You will not be asked to do anything that could harm you, your organization, or cause discomfort. Disclosure of protected or classified information will not be accepted and is strongly discouraged.


Risks:
Potential risks to participants are minimal and primarily involve the potential for breach of confidentiality. Participants may experience discomfort discussing sensitive information about their organization's ransomware experience, despite significant safeguards against disclosure.   


Possible benefits: 
You have the opportunity to participate in a research study that may help similar enterprises to build resilience against future ransomware attacks.


Estimated number of participants:  
Approximately 50-200 participants.


How long will it take? 
The questionnaires are expected to take about 15-25 minutes to complete. 


Costs: 
There are no costs associated with participating in the study. 


Compensation: 
There is no compensation.

Future research: 
The data from this research might be used in future studies; however, the level of confidentiality will remain the same.


Where will the data be stored?  
The data will be securely stored, encrypted, and no one else will have access to the information. All data will be anonymized and de-identified.


How long will it be kept? 
Data will be retained for two years following the study's competition.


Who can see my data?
Only the primary researcher will be authorized to access the data.


This study has a Certificate of Confidentiality:
This study is protected under a confidentiality certificate. 


Questions about the research, complaints, or problems: 
If you have any questions about this research or any issues, arise, please contact Michael Wideman, the principal researcher, at mwideman@captechu.edu


Questions about your rights as a research participant, complaints, or problems: 
Contact the Capitol Technology University IRB (Institutional Review Board) at irb@captechu.edu

There are 34 questions in this survey.