Cyber Social Maturity Assessment

Cyber Social Maturity Assessment

Instructions: Answer the following questions in the topics of Collaboration Triggering, Communication, Problem Solving, SKUE, Trust, Adaptation, Learning and Conflict Management.
1 = Strongly Agree, 2 = Disagree, 3 = Neither, 4 = Agree, 5 = Strongly Agree
Survey

Collaboration Triggering

My Team - Assessment Question

1. My Analysts decide correctly that they should include other analysts in their incident mitigation efforts






2. Members of my team proactively solicit help from other team members






Average:
0.00
Multi-team System

3. My team solicits help from other teams in the CSIRT MTS






4. My team asks other teams in the CSIRT MTS to help them resolve an incident when such help is neccessary.






5. My team decides correctly that they should include other teams in the CSIRT MTS in their incident mitigation efforts.






Average:
0.00

Communication

My Team - Assessment Question

1. Messages sent among my team members contains all critical information.






2. Messages sent or received by the team are understood clearly






3. My team members ask for clarification for messages received from others when they are unsure of something.






4. My team members confirm receipt and understanding of critical communications






5. Information is received on time when trying to address a cyber threat






6. Messages are sent to the correct recipient during different phases of incident resolution.






7. Information is complete and accurate during handoffs between different individuals in my team.






8. My team members quickly resolve communication issues with individuals in their teams.






9. My team members quickly resolve communication issues with team members from other cultues.






Average:
0.00
Multi-team System

10. Messages sent between my team and other teams contain all critical information.






11. My teams ask for clarification for messages received from other teams when they are unsure of something






12. Confirmation of receipt and understanding of critical communications occur between teams.






13. Information is complete or accurate during handoffs between different teams.






14. My teams quickly resolve communication issues with other teams.






15. My teams designate a point person to communicate with other teams or ext. parties.






Average:
0.00

Collaborative Problem Solving

My Team - Assessment Question

1. Team members in my CSIRT proactively solicit help from each other.






2. My team members get together to brainstorm and to consult each other about incident resolution.






3. My team members use the knowledge they have gained from other team members in resolving a novel incident.






4. My team members work together to determine the potential consequences of an event or threat to the cybersecurity of the organization or to constituents.






Average:
0.00
Multi-team System

5. My team members incorporate the expertise of other teams into incident resolution.






6. Teams in the CSIRT proactively solicit help from other teams.






7. Multiple teams get togather to brainstorm and to consult each other about incident resolution.






8. Multiple teams work together to determine the potential consequences of an event or threat to the cybersecurity of the organization or to constituents.






Average:
0.00

Shared knowledge of Unique Expertise (SKUE)

My Team - Assessment Question

1. My team members know exactly who has the knowledge to handle a particular incident.






2. My team members can explain "who knows what" within the team.






3. Members of the team ask the right person for information.






4. In team meetings, members appear to know what other people within the team know.






5. Members of my team communicate what knowledge they possess to other team members.






Average:
0.00
Multi-team System

6. My team members know exactly which teams have the right knowledge to handle a particular incident.






7. My teams can explain "which teams know what" within the CSIRT MTS.






8. Members of the team ask the right team in a CSIRT MTS for information






9. Members of the team communicate what knowledge they possess to other teams in the CSIRT MTS.






Average:
0.00

Trust

My Team - Assessment Question

1. My team members feel confident about the competence of other members.






2. My team members feel comfortable relying on each other when resolving tough incidents.






3. My team members feel confortable admitting mistakes or seeking advice without worrying about being judged or evaluated.






4. My team members share learning oppurtunities with other members.






5. My team members talk freely with each other about difficulties they are having incidents.






6. My team members bring up tough problems and issues with each other.






Average:
0.00
Multi-team System

7. My team feels confident about the competence of other teams in the CSIRT MTS.






8. My team members feel comfortable relying on other teams in the CSIRT MTS when resolving tough incidents






9. My team members share learning opportunities with members of other teams in the CSIRT MTS






10. My team members talk freely with members from other teams in the MTS about difficulties they are having with incidents.






11. My team members bring up tough problems and issues with members of other teams in the MTS.






Average:
0.00

Adaptation

My Team - Assessment Question

1. Members of my CSIRT consider multiple viewpoints when resolving an incident.






2. Members of my CSIRT are willing to switch to new kinds of solutions when existing ones may not be the best.






3.Members of my CSIRT try new ways of thinking about novel events and incidents.






4. Members of my CSIRT adopt new ways of resolving incidents.






5. Members of my CSIRT are comfortable with deviating from normal or typical ways of resolving incidents.






6. My team members change their behaviors or protocols as a result of previous incidents.






7. Members of my team are likely to try new ideas and solutions when resolving incidents.






Average:
0.00
Multi-team System

8. Teams in the CSIRT MTS change their ways of interacting with one another as a result of previous incidents.






Average:
0.00

Continuous Learning

My Team - Assessment Question

1. Team members keep up-to-date with developments in cybersecurity.






2. The design of cybersecurity personnel's work roles allows them to develop new skills.






3. Team members engage others outside of the organization to gain new knowledge and skills.






4. Team members maintain contacts with other cybersecurity professionals in order to learn new knowledge and skills.






5. Team members have the opportunity to try out new ideas processes.






Average:
0.00
Multi-team System

6. Teams discuss how they should interact differently as a result of previous incidents (e.g., in after action reviews).






7. Thinking about "lessons learned" regarding team interactions or after-action reviews occur in a timely manner after events.






8. Multiple teams working together have the opportunity to try new ideas or processes.






9. Teams participate in activities where they can make errors and learn from mistakes without errors being detrimental to the CSIRT's performance (e.g. during training sessions).






10. Multiteam information databses(e.g, a Wiki information board) are used in events.






11. Multiteam information databases (e.g, a Wiki information board) are used in training.






Average:
0.00

Conflict Management

My Team - Assessment Question

1. Members of my team manage differences of opinion without creating tension.






2. Members of my team resolve disagreements about incident mitigation.






3. Members of my team are comfortable having debates about different approaches to incident mitigation.






4. Tension and anger among my team members are well managed.






Average:
0.00
Multi-team System

5. My team manages differences of opinion with other teams in the CSIRT MTS without creating tension.






6. My team resolves disagreements with other teams in the CSIRT MTS about incident mitigation.






7. Tension and anger are well-managed between teams in the CSIRT MTS.






Average:
0.00