2019 Oregon Small Business Cybersecurity Survey

Your participation in this survey is critical to address and improve cybersecurity awareness in Oregon. As you may know, cyber attacks are on the rise. This survey is designed to identify the greatest needs of the Oregon small business community. All individual responses will be kept confidential.

Question Title

* 1. How many people does your company employ?

1-5

6-10

11-20

21-50

50-75

76-100

101+

Question Title

* 2. In what industry does your company operate?

Question Title

* 3. Please rank your greatest concerns surrounding cybersecurity?

Loss of money/revenue

Reputation

Time/operations

Intellectual Property/Confidential Information

Education/ Awareness

Question Title

* 4. How do you provide cybersecurity training for your workforce now? (Please select one)

We do not currently have cybersecurity training.

If we have a problem we react to that problem with training.

We use new hire orientation and/ or on-the-job training to give them what they need to know.

We have a formal policy and training program in place that includes a mixture of computer-based training, courses, and/ or certifications.

We engage our employees in simulated test threats and responses, we encourage customized training programs, and cybersecurity awareness is part of everyone's job.

Other (please specify)

Question Title

* 5. If you have experienced a cyber attack or incident, what was the cause?

Malware, spyware, viruses

Phishing, fraudulent emails

Hacking, intercepted communications

Denial of service attacks (or similar)

Internal actors

Not Applicable- no attacks

Other (please specify)

Question Title

* 6. How and with what frequency do you conduct cyber risk analysis assessments, vulnerability testing, or penetration testing?

Question Title

* 7. If you have an opportunity to work with a cybersecurity advisor through the SBDC, what would you be interested in learning about?

Perimeter security (Firewalls and remote access)

Network and Wireless Security

Data Security and Access Controls (Encryption)

Disaster Recovery Planning/Disaster Continuity Planning

Email/Communications Security

Patch Management

Physical Security

Employee Training

Educational Resources

Other (please specify)

Question Title

* 8. If you have an opportunity to access Cyber Security training, what topics would be of interest?

Data Loss Prevention

Employee Monitoring

Email protection

Bank fraud

Social engineering

Anti-virus/Malware

Data breach recovery planning

Incident response for customers and providers

Education/ training for employees

Vendor security

Other (please specify)

Question Title

* 9. We realize that many small businesses aren't able to have a full-time security team in place on an ongoing basis. Based on your current business structure which of the following options would you consider?

Cybersecurity intern

Completing a small business cybersecurity certification

Small Business cybersecurity Audit/Assessment

One day cybersecurity training conference

Hire a professional cybersecurity team

Access to tools and software

Other (please specify)

Question Title

* 10. Our team is planning to offer a cybersecurity virtual toolbox. Which tools would you be interested in receiving?

Cybersecurity assessment tool

Cybersecurity small business videos

Cybersecurity small business workbook

Cybersecurity small business power point presentations

Cybersecurity small business newsletter

Cybersecurity small business tips of the week

Cybersecurity small business software discounts

Other (please specify)

Question Title

* 11. We would you like to follow-up with you to help you determine best practices based on your company's situation. Please rank your greatest priorities as regards cybersecurity.

Question Title

* 12. How would you rank the cybersecurity environment in Oregon's small business community today?

Fearful - Uncertain about possible threats and how to prepare for them.

Fair - There is a growing awareness of what we can do and what we must do.

Good - There are good resources available to all of us and there appears to be a balance in place between adequate cybersecurity and maintaining economic and technical competitiveness.

Excellent - There is a strong infrastructure in place that addresses both cyber and human security. There are mechanisms to keep us aware of the evolving nature of threats and responses.

Question Title

* 13. What is your full name?

Question Title

* 14. What is your email address?

Question Title

* 15. What is the name of your business?

Question Title

* 16. What is the best phone number to reach you?

Question Title

* 17. What is the address of your business?

Question Title

* 18. Would you be willing to participate in a focus group to help identify cybersecurity needs amongst small businesses?

Yes

Thank you for participating!

For more information about the survey, please contact:

Ruth Swain, Oregon SBDC Cybersecurity Coordinator

ruth.swain@mhcc.edu

(503) 491-7658