All faculty and staff are invited to participate in an online survey as part of a joint study conducted by Fisher College of Business and the Office of Technology and Digital Innovation. The study examines how employees can build resilience to cybersecurity attacks (e.g., phishing). Your insights will help strengthen the university’s defenses against cyber threats and contribute to Ohio State’s broader research mission of advancing knowledge for our communities. The survey will take about 15 minutes to complete, and collected data will be deidentified before researchers review it.
By participating in the study participants will be entered into a drawing to win one of ten $100 gift cards. Your estimated chance of winning one of the gift cards is dependent upon the number of individuals who consent to the study. For example, if 100 individuals consent to the study, you will have a 10% chance of winning a gift card; if 1000 individuals consent to the study, you will have a 1% chance of winning a gift card, etc.
Purpose
The purpose of this study is to gain an understanding of how work structure and design affect resilience to cybersecurity attacks such as phishing emails and password hacks.
Procedures/Tasks
If you agree to participate in this research study, you:
- Will be asked to complete an online survey and provide some information about yourself, your role and work at your employer, and your understanding of cybersecurity in general.
- This survey can be completed in any location so long as you have access to a computer and internet connection. You may skip any question in the survey that follows.
Take part in a cybersecurity study administered by your employer following the completion of the survey. This consists only of providing consent for OTDI to provide the researchers with deidentified data about your IT and cybersecurity actions (e.g., IT Service Desk tickets submitted and correspondence, cybersecurity training modules completed, cybersecurity performance, etc.). No personal identifying information will be shared with the researchers.
You may leave the study at any time. If you decide to stop participating in the study, there will be no penalty to you, and you will not lose any benefits to which you are otherwise entitled. Your decision will not affect your future relationship with The Ohio State University.
Risks and Benefits
We believe there are no known risks associated with this research study; however, as with any online related activity the risk of a breach of confidentiality is always possible. To the best of our ability, your answers in this study will remain anonymous and all personal identifiable information will not be shared. Efforts will be made to keep the information that you consent to give in the study confidential. Your information will be assigned a code number. All of your data provided will be stored in a password-protected file. At the conclusion of the survey you will be given some guidelines and tips on how to act securely and how to mitigate cyberattacks on your work and personal computer. The study may help us understand what work-design factors contribute to cyberattack resistance.
Confidentiality
We will work to make sure that no one sees your online responses without approval. But, because we are using the Internet, there is a chance that someone could access your online responses without permission. In some cases, this information could be used to identify you.
Also, there may be circumstances where this information must be released. For example, personal information regarding your participation in this study may be disclosed if required by state law. Also, your records may be reviewed by the following groups (as applicable to the research):
- Office for Human Research Protections or other federal, state, or international regulatory agencies;
- The Ohio State University Institutional Review Board or Office of Responsible Research Practices;
- Authorized Ohio State University staff not involved in the study may be aware that you are participating in a research study and have access to your information; and
- The sponsor, if any, or agency (including the Food and Drug Administration for FDA-regulated research) supporting the study.
Future Research
Your de-identified information may be used or shared with other researchers without your additional informed consent.
Incentives
If you complete the survey and consent to the study, you will be entered into a random drawing to win one of ten $100 e-gift cards. Your estimated chance of winning one of the gift cards is dependent upon the number of individuals who consent to the study. For example, if 100 individuals consent to the study, you will have a 10% chance of winning a gift card; if 1000 individuals consent to the study, you will have a 1% chance of winning a gift card, etc. The drawing will take place within 120 days. If you are selected to receive a gift card, it will be sent to you digitally. You will receive no payment if you do not finish the survey (excluding questions you are not comfortable answering).
Survey responses suspected of being fraudulent (e.g., bots, counterfeit participants) will not be eligible to receive any financial rewards and may need additional proof of identity.
By law, payments to participants are considered taxable income.
Participant Rights
You may refuse to participate in this study without penalty or loss of benefits to which you are otherwise entitled. If you are a student or employee at Ohio State, your decision will not affect your grades or employment status.
If you choose to participate in the study, you may discontinue participation at any time without penalty or loss of benefits. By agreeing to participate, you do not give up any personal legal rights you may have as a participant in this study.
An Institutional Review Board responsible for human subjects research at The Ohio State University reviewed this research project and found it to be acceptable, according to applicable state and federal regulations and University policies designed to protect the rights and welfare of participants in research.
Contacts and Questions
For questions, concerns, or complaints about the study, or you feel you have been harmed as a result of study participation, you may contact:
John Gray, Ph.D.
Fisher College of Business
2100 Neil Ave, Columbus, OH 43210
Telephone: (614) 247-8021
Email address: gray.402@osu.edu
For questions about your rights as a participant in this study or to discuss other study-related concerns or complaints with someone who is not part of the research team, you may contact the Office of Responsible Research Practices at 1-800-678-6251 or hsconcerns@osu.edu.