Looking for Research Study Participants for the impact of current cybersecurity frameworks on C-SCRM

[MTolano]

Hello everyone! My name is Michael Tolano, and I am a doctoral student at National University. I am conducting an online survey to study the impact of the available cybersecurity frameworks, policies, and procedures on the ability of cybersecurity and IT procurement professionals to produce adequate Cyber-Supply Chain Risk Management (C-SCRM) initiatives. In order to participate, you must be 18 years of age or older, have worked in either the cybersecurity or IT procurement fields, and have some experience with the available cybersecurity or C-SCRM frameworks from NIST or other vendors.
The survey is anonymous and has nine questions that should take 15-20 minutes to complete, and will ask questions about your knowledge and experience with existing C-SCRM and cybersecurity resources, their effectiveness, and their overall impact on your abilities to enable you to create an adequate C-SCRM program.

Follow this link if you wish to participate in this voluntary research: https://ncu.co1.qualtrics.com/jfe/form/SV_1G5zLxvIMDb9Q4C Feel free to share this link with others!

[jbuitron]

Please define the acronym C-SCRM?

thank you,

Dr. Jan, DCS

[MTolano]

Good Morning Dr. Jan, 

     C-SCRM stands for Cyber-Supply Chain Risk Management, or Cybersecurity Supply Chain Risk Management. Thanks for asking! 

[jbuitron]

Hello MTolano,

I have briefly touched on Supply Chain Risk Management in my career. It was for 4 to 5 months. I an unsure if that is enough experience for me to participate in your research. Mind you, I would be delighted to assist. I have mentored 1 Master's Student and am mentoring another DCS student at Colorado Technical University even now.

best to you,

Dr. Jan

[MTolano]

Dr. Jan, 

   As long as you have some familiarity with risk management, C-SCRM, IT procurement, or any of the frameworks that relate to cyber risk management or cyber-supply chain risk management, you will have enough experience to participate in the survey. Most people in the field actually would qualify to some extent, especially after I altered a few questions to open it up to more people. 

        Have a great week. 

            Mike Tolano

[jbuitron]

I did take the survey.

Now, I would like to see a dissertation on how neurodivergent individuals contribute to cybersecurity. I discovered the term "dyscalculia" a couple of years ago . . difficulty in doing math 'in one's head' and overall difficulty with word problems in math. And now, with AI, using ChatGPT, Delphi.ai, and Duck.ai, I am learning that Dyscalculia has 'gifts.' The brain actually rewires the mathematical 'nodes' in the mind to be able to do advanced Mechanical Reasoning (scored 100% at age 13 on a Mechanical Reasoning exam; the average person scores between 60% and 80%), advanced linguistic capabilities, and advanced spatial reasoning. Plus, dyscalculaics have the ability to thrive in fluid, unstructured environments . . cybersecurity SURE is fluid!!

[MTolano]

Still looking for participants, I have made a few adjustments to make it open to more people. So, if you have looked at it previously and could not complete it, give it another shot! Thanks, and have a great weekend!!

[MTolano]

@jbuitron That would be a pretty interesting study. Sometimes, I actually think that maybe the opposite should be studied. I am not sure about everywhere else, but where I work, it seems that there are more people who are neurodivergent versus "normal" people. Most of the folks I know in the field have some form of ADHD or Autism, and they do particularly well in incident response and auditing. Heck, I may be neurodivergent and not even know it, especially with my obsessive tendencies when it comes to researching something to its actual source. If this ever gets done, I would love to see it. I don't think another study is in my future any time soon as this one is leaving a bad impression of the process.  

[nkeaton]

@jbuitronI believe there was an article about that subject in a recent ISC2 article. I do the quizzes and was in one of those.

Edit:  I went back and looked: https://www.isc2.org/insights/2025/06/a-neurodivergent-womans-journey-in-cybersecurity?queryID=e9de3....  

On a search of the ISC2 site, there are 2 other articles besides this one.