This survey is for the CSRC website.

1. Have you implemented any NIST guidance or standards to modify the security policies/practices/technology in your organization or security-related products/services offered by your organization?
Yes No    (if answer is No, please go to question 4a)
 

2a. What was the last NIST guideline/standard that you used?
(Please choose one publication from this drop-down list below.)

Nothing selected SP 800-67 Triple Data Encryption Algorithm SP 800-66 HIPAA SP 800-64 Systems Development Life Cycle SP 800-63 Electronic Authentication SP 800-61 Incident Handling Guide SP 800-60 Mapping Types of Information SP 800-59 Identifying a National Security System SP 800-58 Voice Over IP SP 800-57 Key Management SP 800-56 Key Management SP 800-55 Security Metrics SP 800-53 Recommended Security Controls SP 800-51 Common Vulnerabilities and Exposures SP 800-50 Security Awareness Training SP 800-49 S/MIME V3 Client Profile SP 800-48 Wireless Network Security SP 800-47 Interconnecting IT Systems SP 800-46 Telecommuting SP 800-45 Electronic Mail Security SP 800-44 Securing Public Web Servers SP 800-43 Windows 2000 SP 800-42 Network Security Testing SP 800-41 Firewalls SP 800-40 Security Patches SP 800-38C CCM Mode SP 800-38B RMAC Authentication Mode SP 800-38A Block Cipher Modes SP 800-37 Certification and Accreditation SP 800-36 Selecting Security Products SP 800-35 IT Security Services SP 800-34 Contingency Planning SP 800-33 Technical Models IT Security SP 800-32 Public Key Technology SP 800-31 Intrusion Detection SP 800-30 Risk Management SP 800-29 Comparison FIPS 140-1 and 140-2 SP 800-28 Active Content and Mobile Code SP 800-27A Engineering Information Technology SP 800-26 Self-Assessment Guide SP 800-25 Public Key Technology SP 800-24 PBX Vulnerability Analysis SP 800-23 Assurance and Acquisition SP 800-22 Random Number Generator SP 800-21 Implementing Cryptography SP 800-20 Modes for Triple DES SP 800-19 Mobile Agent Security SP 800-18 Developing Security Plans SP 800-17 Modes Validation System SP 800-16 Security Training Requirements SP 800-15 PKI Interoperability Specification SP 800-14 Generally Accepted Principles SP 800-13 Telecommunications Security SP 800-12 IT Security Handbook FIPS 199 Security Categorization FIPS 197 Advanced Encryption Standard FIPS 186-2 Digital Signature Standard (DSS) FIPS 180-2 Secure Hash Standard (SHS) FIPS 140-2 Requirements for Cryptographic Modules FIPS 46-3 Data Encryption Standard
 

2b. How would you rate your satisfaction with this guideline or standard?
(Please choose one answer from drop-down menu below.)

Nothing selected a) completely satisfied b) very satisfied c) moderately satisfied d) slightly satisfied e) dissatisfied
 

3a. If your answer to question 2b was "e) dissatisfied", which of the following would increase your level of satisfaction?
(Please select one answer from drop-down menu below.)

Nothing selected a) additional or more detailed technical content b) additional or more detailed implementation guidance c) implementation tool(s) d) Other/additional comments - please describe in text box below

3b. (Part 2) - If your choice from question 3a was "d) Other/additional comments", please insert comments in text box below by clicking in the textbox. If your answer was not "d) Other/additional comments", please go to question 4a.

 

4a. How would you rate your satisfaction with the CSRC website and its services?
(Please choose one answer from drop-down menu below.)

Nothing selected a) completely satisfied b) very satisfied c) moderately satisfied d) slightly satisfied e) dissatisfied

4b. If not completely satisfied, what suggestions would you offer for improvement?
(left click with your mouse inside textbox below to insert cursor in the text box.)

Demographic:

5. Are you employed by:
(Please choose one answer from drop-down menu below.)

Nothing selected a) U.S. federal government b) U.S. state, local or tribal government c) U.S. -based general IT vendor (products or services d) U.S. -based IT security vendor (products or services e) U.S. -based industry (e.g., manufacturing, health care) f) U.S. Academic institutions (primary, secondary, university) g) Foreign - governments h) Foreign - other organizations and individuals i) other (e.g., self-employed)
 

6. Are you the chief official responsible for information/cyber security in your organization?
Yes No
 

7. Have you been working as a security professional for more than 5 years?
Yes No
 

8a. How did you learn about the site:
(Please choose one answer from drop-down menu below.)

Nothing selected a) NIST staff contact, workshop, or publication b) Security conference or forum c) Co-worker or associate d) Industry publication e) Internet search on "security" f) Other? Please list in text box below.
 

8b. Please list other source(s) from question 8a in text box below.
(left click with your mouse inside textbox below to insert cursor in the text box.)