OMB.report

Federal forms, ICRs, and supporting documents

Information Collection Request

Office of Cyber Security & Communications (CS&C) Information Technology (IT) Sector Small and Midsize Businesses (SMB) Cybersecurity Survey

ICR 201712-1670-002 · OMB 1670-0038 · Historical Active

Forms and Documents
DocumentTypeStatusAvailability
IT Sector Coordinating Council Survey Form New Repair queued
1670-NEW_IT Sector Survey_SS-B.docx Supporting Statement B Uploaded 2017-12-11 Available
1670-NEW_IT Sector Survey_SS-A.docx Supporting Statement A Uploaded 2017-12-28 Available
1670-NEW_IT Sector Survey_Comment Matrix.docx Supplementary Document Uploaded 2017-12-11 Available
1670-NEW - IT Sector Survey_30 day FRN.pdf Supplementary Document Uploaded 2017-12-18 Available
1670-NEW - IT Sector Survey_60 day FRN.pdf Supplementary Document Uploaded 2017-12-11 Repair queued
EO 13636.pdf Supplementary Document Uploaded 2017-12-11 Available
15 USC 648(g).pdf Supplementary Document Uploaded 2017-12-11 Available
6 USC 148.pdf Supplementary Document Uploaded 2017-12-11 Available
IC Document Collections
IC IDCollectionTypeStatusForm
229418 IT Sector Coordinating Council Survey Form New
ICR Details
1670-0038 201712-1670-002
Historical Active
DHS/CISA
Office of Cyber Security & Communications (CS&C) Information Technology (IT) Sector Small and Midsize Businesses (SMB) Cybersecurity Survey
New collection (Request for a new OMB Control Number)   No
Regular
Approved without change 07/22/2019
Retrieve Notice of Action (NOA) 01/09/2018
Given one year to reevalute the collection based on recommendations from NIST.
  Inventory as of this Action Requested Previously Approved
07/31/2020 36 Months From Approved
1,000 0 0
500 0 0
0 0 0
The Information Technology (IT) Sector, represented by industry via the IT Sector Coordinating Council (SCC) and by Government via the IT Government Coordinating Council (GCC), established the IT Sector Small and Midsized Business (SMB) Cybersecurity Best Practices Working Group (“Working Group”) to develop best practices for implementing the NIST Cybersecurity Framework in the SMB community. The Working Group, which consists of industry and government representatives, developed the SMB Cybersecurity Survey to determine Return on Investment (ROI) metrics for NIST Cybersecurity Framework adoption among SMB stakeholders. This process will assess the effectiveness of the NIST Cybersecurity Framework. This process will also establish a baseline for ROI metrics, which have not previously existed in the SMB community. The IT Sector-Specific Agency (SSA), headquartered in DHS’s Office of Cybersecurity and Communications (CS&C), is supporting the Working Group’s survey development.
US Code: 6 USC 148 Name of Law: Domestic Security
   US Code: 15 USC 648 Name of Law: Commerce and Trade
   EO: EO 13636 Name/Subject of EO: Improving Critical Infrastructure Cybersecurity
  
None
Not associated with rulemaking
  82 FR 32859 07/18/2017
82 FR 60026 12/18/2017
Yes
1
IC Title Form No. Form Name
IT Sector Coordinating Council Survey n/a IT SCC Survey
  Total Approved Previously Approved Change Due to New Statute Change Due to Agency Discretion Change Due to Adjustment in Estimate Change Due to Potential Violation of the PRA
Annual Number of Responses 1,000 0 0 1,000 0 0
Annual Time Burden (Hours) 500 0 0 500 0 0
Annual Cost Burden (Dollars) 0 0 0 0 0 0
Yes
Miscellaneous Actions
No
This is a new collection.
$40,934
Yes Part B of Supporting Statement
    No
    No
No
No
No
Uncollected
Molly Stasko 202 868-2972 [email protected]
  No
On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
 
 
 
 
 
 
 
    (i) Why the information is being collected;
    (ii) Use of information;
    (iii) Burden estimate;
    (iv) Nature of response (voluntary, required for a benefit, or mandatory);
    (v) Nature and extent of confidentiality; and
    (vi) Need to display currently valid OMB control number;
 
 
 
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.
01/09/2018