Before revision:  We aim to capture the factors that affect the attitudes and intentions of CSO employees to engage in security and privacy behaviors by using a survey-based study to collect data about employees working at US-based civil society groups. In this paper, we describe the steps that we take to minimize risks to the respondents, such as employing a privacy-centric surveydesign, anonymity-preserving incentive strategies, and recruitment that does not reveal any identities .
After revision:  We aim to capture the factors that affect the attitudes and intentions of CSO employees to engage in security and privacy threats, and their self-reported mitigation strategies. The design of our preliminary survey accounted for the unique requirements of our target population by establishing trust with respondents, using anonymity-preserving incentive strategies, and recruitment that does not reveal any identities .