Cyber Asset SurveyCyber Asset Survey

Purpose:
- To Assess the Cyber Security Industry in the State
- To Catalog the Cybersecurity Work Being Performed Throughout Maryland
- To Use As a Tool to Research and Share Collaboration
- To Identify the Baseline of What Services Are Being Provided
- To Identify What Services Are Available on Top of the Baseline
- To Promote Cybersecurity Tech Transfer and Commercialization

1. How would you describe your organization?

How would you describe your organization? Cyber Professional Distributor/VAR Educational Institution Hardware OEM	Professional Services Service Provider Software OEM Systems Integrator
Other (please specify)

2. What type of presence/organizational footprint do you have in Maryland?

What type of presence/organizational footprint do you have in Maryland? 0-9 employees

10-49 employees

50-99 employees

100-499 employees

500-999 employees

1000-2499 employees

2500-4999 employees

5000+ employees

3. What types of standards/certifications does your company possess?

What types of standards/certifications does your company possess? ANSI/INCITS Info Security (BMIS) ISA-99 ISO 15408 ISO/IEC 27001	ISO/IEC 27002 IT Assurance\Audit (ITAF) IT Governance & Control(COBIT) IT Risk Management (Risk IT) IT Value Delivery (Val IT)	NERC 1300 (CIP-002-1 to CIP-009-2) NIST / FIPS None RFC 2196 Standard of Good Practice (SoGP)
Other (please specify)

4. In what markets do you currently provide Cyber Services?

In what markets do you currently provide Cyber Services? Federal Government - Defense/Security

Federal Government - Non-Defense

State and Local Government

Enterprise

Critical Infrastructure

Small Business

Consumer

Education

5. What types of cybersecurity business does your organization currently perform?

What types of cybersecurity business does your organization currently perform? Auditing/Compliance Certification Computer Security Detection & Diagnosis Identity & Access Management Incident Response Information Assurance Information Security	Internet Security and Malicious Code Investigations/Forensics Analysis Network Resilience Operations Penetration Testing Physical Security Policy Development Secure Application Coding	Security Accountability Security Threats Social Engineering / Training Supply Chain Integrity Testing & Evaluation Training Unable to disclose
Other (please specify)

6. What types of standards/certifications services does your company provide?

What types of standards/certifications services does your company provide? ANSI/INCITS FIPS Info Security (BMIS) ISA-99 ISO 15408	ISO/IEC 27001 ISO/IEC 27002 IT Assurance\Audit (ITAF) IT Governance & Control(COBIT) IT Risk Management (Risk IT)	IT Value Delivery (Val IT) NERC 1300 (CIP-002-1 to CIP-009-2) RFC 2196 Standard of Good Practice (SoGP)
Other (please specify)

7. Does your business have any cybersecurity partnerships with public sector organizations?

Does your business have any cybersecurity partnerships with public sector organizations? Yes

Specify any partnerships you wish to disclose

8. Are you currently looking to grow or increase your cybersecurity presence as an organization?

Are you currently looking to grow or increase your cybersecurity presence as an organization? Yes

Specify any growth strategy you wish to disclose

9. What Cybersecurity skill sets do you need for continued successful operations?

What Cybersecurity skill sets do you need for continued successful operations?

10. What type of educational background do you look for in your staff?

	Computer Science	Information Systems	Information Assurance	Information Technology	Engineering	Other
Associates Degree	*What type of educational background do you look for in your staff? Associates Degree Computer Science	Associates Degree Information Systems	Associates Degree Information Assurance	Associates Degree Information Technology	Associates Degree Engineering	Associates Degree Other
Bachelors Degree	Bachelors Degree Computer Science	Bachelors Degree Information Systems	Bachelors Degree Information Assurance	Bachelors Degree Information Technology	Bachelors Degree Engineering	Bachelors Degree Other
Masters	Masters Computer Science	Masters Information Systems	Masters Information Assurance	Masters Information Technology	Masters Engineering	Masters Other
PHD	PHD Computer Science	PHD Information Systems	PHD Information Assurance	PHD Information Technology	PHD Engineering	PHD Other
Other	Other Computer Science	Other Information Systems	Other Information Assurance	Other Information Technology	Other Engineering	Other Other

11. What types of credentials and certifications do you need on your staff, other than security clearances?

What types of credentials and certifications do you need on your staff, other than security clearances? Certification and Accreditation Professional (CAP) Certified Authorization Professional (CAP) Certified Ethical Hacker (CEH) Certified Information Systems Security Professional (CISSP) Certified Secure Software Lifecycle Professional (CSSLP) Certified Wireless Security Professional (CWSP)	Cisco Certified Security Professional (CCSP) CompTIA A+; Network+; Security+ Computer Hacking Forensic Investigator (CHFI) Information Systems Security (INFOSEC) Information Systems Security Architecture Professional (ISSAP) Information Systems Security Engineering Professional (ISSEP)	Information Systems Security Management Professional (ISSMP) Microsoft MCITP; MCSE Systems Security Certified Practitioner (SSCP) Systems Security Certified Practitioner (SSCP)
Other (please specify)

12. Do Maryland's academic institutions provide you with these types of employees?

Do Maryland's academic institutions provide you with these types of employees? Yes

If no, what types of education or training opportunities should Maryland’s educational institutions offer to prepare workers for careers in Cybersecurity?

13. The Maryland Department of Business & Economic Development is developing a Cyber Directory of companies in the State. If you would like to be included in the directory, kindly provide the information below.

The Maryland Department of Business & Economic Development is developing a Cyber Directory of companies in the State. If you would like to be included in the directory, kindly provide the information below. Name:
Company:
Address:
Address 2:
City/Town:
State:
ZIP:
Country:
Email Address:
Phone Number: