🚀 go-pugleaf

Security perception survey.
----------------------------------

I am conducting this survey as a part of a project for an 
MSc in Information Security at Royal Holloway, University of London.

My project is based on how we get the security message across and
how this message may be improved.

I work full time in the computer industry, and been involved with security
for some time. I am concerned that while security is a dry topic, there
is considerable room for improvement in the methods that security
professionals use to make people aware of problems
caused by inadequate security measures when applied 
to computer information and systems. 

This survey is  aimed at anyone who uses computers in their workplace.
Please take part no matter at what level you perceive you are, and mail
all surveys to paul@nadir.demon.co.uk.

Please note that I am not asking for any company specific information.
All mail addresses will be discarded unless you request survey results.
(See end of survey).

Thank you.

Paul Andrews.


An apology.
--------------

I have posted this in many newgroups, including one previous failure.
Please accept my apologies if you see this posting more than once.

********************************************************************************

SURVEY START.
--------------

About your own workplace.
-------------------------

1. Do you use a PC or workstation in your work ? (Please state which).         
			
		_______________________________________

1a.	Is your PC/Workstation networked ?		YES / NO



2. Are backups of your data taken ?			YES / NO

2a.	Who takes those backups ?			ME / OTHER

2b.	At what interval ? 	(State time period or unknown).

		_______________________________________

2c.       Do you take regular backups anyway ?		YES / NO
            (Please answer regardless of 2a).

2d.	If YES to 2c, then how often ?

	Occasionally 		[ ]	Regularly (weekly)	[ ]	

	Regularly (monthly)	[ ]	Regularly (other) 	[ ]



3. Do you ever work from home ?				YES / NO

3a.	If YES, is it dial up or a stand-alone system at home ?	

						DIAL / STAND-ALONE

3b.	If YES do you interchange data between home system & work ?	
						
							YES / NO



4. Does your company have a security policy that you know of ?		
			
							YES / NO

4a.	If YES is the security policy readily available to you ?	

							YES/ NO

4b.	If YES, in what form is the policy available (on-line/paper etc) ? 

	Please specify : ________________________________________



5. Do you have a central person(s) from whom you can obtain advice on 
	computer security ?						
							YES / NO

5a.	Do you know who that person is ?		YES / NO

5b.	Have you ever had cause to consult that person ?

							YES / NO
5c.	If YES to 5b,
	
	Were they helpful ?				YES / NO
	Did you feel you could consult them again ?	YES / NO

	Did what was said cause any problems ?		YES / NO
	( ie: Project delay, code rewrites etc.)



6. Have you ever received any Security Awareness training from 
	your current employer ?
										
							YES / NO
6a.	If YES, what sort ?

	Induction course 	[ ]  Training course	[ ]

Other, Please specify : ________________________________________

6b. 	Have you ever received any follow up training ?
         	(ie: As a result of a new virus being discovered, 
		or perhaps on annual refresher course).
		
							YES / NO
If YES, in what form was that training ?

           Please specify : ________________________________________



7. If NO to Q6, would you consider it a worthwhile investment of your 
   time if you were offered IT security training by your employers ?

							YES / NO

7a.	Based on your current security experience however large or small,
	do you think any such training would be interesting or not ?

						INTEREST / NOT INTEREST


8. Would you like to be better informed about IT Security ?		
   (Please answer regardless of answers to 6 & 7 above)

							YES / NO 


9. What do you think would be the most likely cause of unavailability of the  
      information on your computer ?  Please enter appropriately !
 
(Some possibilities : Hardware/software failure, virus, theft etc etc).

___________________________________________________________


About your company/organisation.
-------------------------------------------


10. Do you think your company should be more pro-active towards security 
    or have they got it about right  ?

					MORE PROACTIVE  /  ABOUT RIGHT


11. What is your company's main business  ?
    (Please indicate  or complete the "other" line).

Consultancy		[ ]  System/Software developer 		[ ]	
Public utilities 	[ ]  Communications 			[ ]
Central/Local government[ ]  Retail/distribution		[ ]
Defence/Military 	[ ]  Finance/Banking/Insurance 		[ ]
Computer manufacturer	[ ]  Education/Training 		[ ]
Marketing/Media		[ ]  Transport/Freight			[ ]
Manufacturing		[ ]  Process/Chemical			[ ]	
Medical			[ ]  Construction/Civil Engineering	[ ]  

Other, Please specify : ________________________________________


12. What of the following best describes your position within your company ?
    (Please indicate or complete the "other" line).

Board director		[ ]  Executive Technical	[ ]
Non Board director	[ ]  Executive Non-Technical	[ ]
Manager with staff	[ ]  Consultant			[ ]
Manager without staff	[ ]	

Other, Please specify : ________________________________________


13. Approximate Number of employees in your Organisation ?

1 -24	[ ]  50-99	[ ]  250-499	[ ]  1000-4999	[ ]

25-49	[ ]  100-249	[ ]  500-999	[ ]  5000-9999	[ ]

>10000 	[ ].


14.  In which newsgroup did you find this survey ?

       Please specify : ________________________________________


Any other comments.
---------------------------

Please feel free to add anything at all relevent here, especially if you
have any ideas as to how the security awareness may be made more
"attractive"

SURVEY END.
-----------

Please give this survey to a friend or collegue. (The more the better !)

Please note that the closing date for this survey is Friday 19th August, but
I would really appreciate replies as early as possible.

If you would like a brief summary of the results  from this survey, please 
cross the box.

Summary of results ? [  ].

Thank you very much for your time and effort.

-- 
Paul Andrews