Screen Reader Mode Icon

Introduction

In light of recent and ongoing cybersecurity challenges in both the commercial and policy arenas, USTelecom is seeking to investigate drivers relating to industry and government investment in cybersecurity, and related public policy and national security considerations. The information obtained can help inform policymakers as they evaluate mechanisms to enhance our nation's cyber resiliency.

We are very appreciative of your support for this important inquiry.

All information that is provided will be treated as confidential and any reporting will be anonymized. 

Question Title

* 1. Name

Question Title

* 2. Association/Organization

Question Title

* 3. Title 

Question Title

* 4. Sector (select multiple boxes if applicable)

Question Title

* 5. What is the size of your organization? (# of employees)

Question Title

* 6. Do you think the U.S. government is dedicating adequate resources to:

  Inadequate resources Adequate resources More than adequate resources
Pursue international global criminal actors
Coordinate with global international law enforcement agencies
Combat nation-state adversaries
Promote public cybersecurity awareness
Promote cybersecurity workforce development
Promote U.S. engagement in international cybersecurity standards development
Grow the cybersecurity insurance marketplace
Support critical infrastructure cybersecurity

Question Title

* 7. How would you characterize the federal government's effectiveness to prioritize, streamline, and rationalize cybersecurity policy initiatives, and how might this be improved?

Question Title

* 8. How effective do you think the following government initiatives/resources have been in securing organizational cybersecurity?  Please skip this question if you are unfamiliar with any of these products.

  Ineffective Somewhat effective Very effective
NIST Cybersecurity Framework (CSF)
NIST SP 800-53 Security & Privacy Controls
NIST SP 800-171 Information Security Controls
DoD Cybersecurity Maturity Model Certification (CMMC)
DHS ICT Supply Chain Risk Management Taskforce
CISA engagement with critical infrastructure owner/operators

Question Title

* 9. How adequate is federal cyber spending relative to the investment from the attacker community (e.g.,
global criminal enterprises
and nation-state)?

Question Title

* 10. What type of support do private sector enterprises (in general) need most from the U.S. government?

  No support needed Minimal support needed Substantial support needed
Actionable and timely information/intelligence sharing
Tax credits
Technical/operational assistance
Targeted subsidies/grants
Lower insurance
Regulatory forbearance
Procurement preferences

Question Title

* 11. How effective is government regulation in achieving appropriate levels of cybersecurity?

Question Title

* 12. How effective are voluntary frameworks in achieving appropriate levels of cybersecurity?

Question Title

* 13. Please rank the following considerations in order of importance for establishing private sector cybersecurity budgets.  Note: You can either drag the line item in the appropriate rank order (top line highest priority) OR select the number ranking (Number 1 is highest priority) in the pull-down.

Question Title

* 14. Please elaborate on the above ranking in question 13 as well as any other considerations.

Question Title

* 15. How should our nation address the gap between commercial levels of cybersecurity investment by the private sector and national security levels of investment?

Question Title

* 16. What top policy recommendations would you recommend to enhance our nation's overall cybersecurity resilience?

0 of 16 answered
 

T