Cybersecurity Survey

Cybersecurity Survey
Small and medium-sized health and social care organizations are on the frontlines of protecting sensitive data, yet often face significant challenges in compliance, resources, and cybersecurity preparedness. DirectTrust, a non-profit dedicated to scaling trust in health technology, is exploring ways to marshal resources to help organizations like yours, and we want to hear from you!

Please take this quick, seven question survey to help us better serve you. Note that all individual responses will remain confidential; responses will only be used in aggregate, and in accordance with DirectTrust’s Privacy Policy.
What are your biggest cybersecurity challenges? (Select the top 3)

Staff/contractor trainingBudget constraintsOutdated/legacy systemsCompliance complexity/keeping up with rulesAccess to or finding resources/toolkits/educationVetting/selecting cybersecurity vendors/consultantsMaintaining contracts/Business Associate Agreements and oversightExecutive/Board awareness/supportObtaining/retaining technical talentUnderstanding/purchasing cyber insuranceOther
Cybersecurity/Risk Program
How formal is your cybersecurity program?

Not formal --- Few or no formal policies, no designated security officer, rare or no security risk assessments, no dedicated security staff.Somewhat formal --- A risk management program exists but is not regularly updated, a significant set of policies are in place, security assessments are conducted but not consistently, a security officer is named, and staffing is adequate.Very formal --- A mature risk management program is in place with regular reviews, complete and maintained policies and procedures, annual risk assessments, technical safeguards (like regular scans), and a dedicated security officer and security team assigned.Other
When was your organization's most recent Security Risk Analysis conducted? (Select the option that best applies.)

Within 1 year2-5 years agoOver 5 years agoNeverUnknown
How do you currently handle compliance with healthcare cybersecurity regulations (e.g., HIPAA, HITECH)? (Select the option that best applies.)

In-house resourcesOutsourcedUnknown
Cybersecurity Services and Resources

Please rate how valuable the following services and resources would be to your organization if made available to you at low to no cost [1=Not Valuable to 5=Extremely Valuable]
Independent evaluation/accreditation of technical standards for your service providers (e.g., health information exchange, HISP, EMR/EHR, cybersecurity monitoring tools)
Independent evaluation/accreditation of risk management (risk analysis, policies, etc.) for your service providers (cybersecurity consultants, outsourced compliance or Chief Information Security Officer)
Tools for vetting technical service providers and consultants
Access to resource libraries (policies, tools, frameworks)
Advocacy efforts to legislators and regulators (encouraging financial support, technical standards, technical assistance, etc.)
Webinars and training sessions on cybersecurity
Low- or no-cost technical assistance and consulting on cybersecurity
An online community forum to ask questions and share best practices with peers and experts
Other cybersecurity service or resource that would be valuable (Please describe):
Survey conclusion and respondent information
Industry Segment (Check all that apply)

HospitalAmbulatory primary or specialty care providerFQHC/CHC/RHCBehavioral Health or Substance Use Treatment OrganizationLong-Term or Post-Acute Care (SNF, home health, hospice, assisted living, etc.)Health IT Vendor (EHR, Telehealth, Cybersecurity, etc.)Government / Public Health AgencyHealthcare Consultant / Managed Service ProviderOther
Organization Size - Full-Time Employees (FTEs):

1-1011-5051-250251-1,0001,000+Unknown or Not Applicable
Organization Size - Revenue Category

<$1M$1M - $10M$10M - $50M$50M - $250M$250M+Unknown
Role of Respondent

Executive Leadership (CEO, COO)IT / Security Professional (CIO, CISO, IT Director, Application Analyst)Business (CFO, Procurement)Compliance / RiskClinical (CMO, Nursing Director)Consultant Vendor RepresentativeOther
Business Operations Location

Single U.S. state or territoryMulti-state (regional)National (largely across the U.S.)International
If you selected single state, territory or multi-state, please provide details on which state(s) or territories
As a thank you for completing this survey:
As a token of our appreciation, you’re eligible to be entered for a chance to win a $100 gift card or free registration to the upcoming DirectTrust Conference August 4-7th, 2025, in St. Louis, Missouri! Winners will be notified by June 10th.

To be entered in the drawing, please provide your contact information:
Name

First NameLast Name
Organization
Email
example@example.com
Phone Number
Please enter a valid phone number.
I would like to win (select one or both)

Gift CardConference Registration
Please verify that you are human*
Should be Empty:

Cybersecurity Survey

Cybersecurity/Risk Program

Cybersecurity Services and Resources

Survey conclusion and respondent information

As a thank you for completing this survey: