Welcome
You have been invited to participate in a research study that examines the current state of implementation for the Cyber Supply Chain Risk Management (C-SCRM) Key Practices and recommendations from NISTIR 8276.

This notice is part of a process called “informed consent” to allow you to understand this study before deciding whether to participate. By clicking on the link to the questionnaire below, you consent to the conditions outlined in this form.

This study is being conducted by a researcher who is a doctoral student at Capitol Technology University.

Background Information:
The purpose of the study is to obtain data on the current state of implementation of the recommendations and C-SCRM Key Practices from NISTIR 8276. Biographical data about the size and nature of products and services sold will also be captured to analyze and correlate with the survey results. NISTIR 8276 has 24 recommendations mapped to 8 key practices for C-SCRM. NIST, in the development of NISTIR 8276, incorporated 7 case studies published in 2015, 18 case studies published in 2019, and referenced 10 industry best practices and standards.

Procedures:
If you agree to participate in this study, you will be asked to:

• Read this notice and consent to participate.
• Click the link to the questionnaire found on the bottom of this page.
• Once inside the questionnaire, read and select a response for each of the 46 research questions. Estimated completion of the questionnaire is under 15 minutes.
• Submit your questionnaire when finished.

Voluntary Nature of the Study:
Your consent to participate in the survey is being given voluntarily. You may refuse to participate in the survey. If you decide to participate in the survey, you are free to withdraw at any time without any negative effect on your relations with Capitol Technology University, the researcher, or with any other participating institutions or agencies. You may skip any of the questions in the survey other than the Question 1 confirming your consent to participate in the study.

Risks and Benefits of Participating in the Study:
Completing the survey involves no risk to you. The questionnaire is expected to take less than 15 minutes. By participating in the study, you are providing additional data points to examine the current state of C-SCRM Key Practices. The results of the study can be used by an organization to benchmark their status versus the aggregated results. More data captured by the study will result in more accurate benchmarking, so your participation is truly appreciated.

Compensation:
There will be no compensation for participating in this study.

Confidentiality:
The aggregated results of this study will be published, but no information that could identify you will be included. No personally identifiable information is asked about you or your organization in the questionnaire. The raw data collected will only be available to the researcher. This consent form does not ask for your name or signature, as that would provide a way to identify you.

Contacts and Questions:
Questions about this research may be addressed to jrbaldwin@captechu.edu

Link to Questionnaire:

Thank you for your participation!