Internet Survey Security for Surveymonkey

Internet Survey Security for SurveyMonkey HSRC has vetted SurveyMonkey because it is commonly used for web-based surveys. If you choose to use SurveyMonkey, please read the following and follow all requirements. (If using Qualtrics, please see InternetSurveySecurityQualtrics). If you choose an online survey company other than SurveyMonkey, please complete the Internet Survey Security form available at http://www.cwu.edu/~hsrc/forms.html

SurveyMonkey.com

If using SurveyMonkey, HSRC requires the researcher purchase a package that allows one to customize the “thank you” page and to add SSL encryption for added security. The most affordable option to do both is $17/mo. or $204 annual (Select Plan) If you need a redirect-upon-completion page in order to offer an incentive to participants, you will need to purchase the Gold Plan at $25 per month ($300 annual).

1. Does the survey use https encryption? Yes, but only if you purchase this option. HSRC requires this. One must purchase either the Select, Gold, or Platinum Plan.

2. If so, are there controls in place to prevent respondents from accidentally entering survey data via an http protocol rather than https (i.e., does the server display an error message or automatically re-route to an https page)? With https encryption in place, the survey link will take you to the https page automatically.

3. Do researchers have access to their data from the database via a username and password? Yes

4. Does the company maintaining the survey database provide the researcher with written assurances that it will not improperly access or disclose the survey information? Yes, but you can choose a higher level of security. SurveyMonkey states: “Your survey questions, responses and results are kept in strict confidence and used in compliance with legal requirements. We will never use your survey questions or responses other than in accordance with this privacy policy unless we have your consent, and then only anonymously and by aggregating them with questions and responses from other surveys. You may be asked whether you wish to opt in to allowing us to use your survey questions and/or responses in this way at the time of creating your account or your survey. If you opt in, we may use the anonymized and aggregated survey questions and/or responses to create data services or content.”

5. Are the servers that the company uses located in a data center with physical security controls and environmental controls? Yes. Servers are kept in locked cage requiring biometric recognition for entry; there is surveillance equipment on server site and 24/7 staffing. Environmental controls such as firewall protection, redundant internal power supplies, and hourly data backup are in place.

6. Can survey data be collected anonymously?

Yes, but this requires that you alter the “collector settings” to not save (disable storage of) IP addresses or email addresses. For instructions, see http://help.surveymonkey.com/app/answers/detail/a_id/335/c/10. (This link takes you to Answers & FAQs, Privacy and Security)

InternetSurveyMonkey.doc Rev March 28, 2013