## 2 Materials and Methods
### Our Survey Methodology
#### 2.2.2 Phase II: Launch and Run  
The \"Launch and Run\" phase involves the request for participation in our IoTSRM2-based survey (Step II.1), the submission of reminders about our IoTSRM2-based survey (Step II.2), and the export of survey responses to Excel and the rejection of incomplete survey responses (Step II.3). **Step II.1: Request for participation in the IoTSRM2-based survey**  
Step II.1 involves the identification of target survey respondents for our sampling frame, and the request for participation of the target respondents in our IoTSRM2-based survey. First, the identification of the target survey respondents is based on our target groups of survey respondents selected in Step I.2. Second, the request for participation in our IoTSRM2-based survey entails the creation of social media posts and private messages for requesting participation in our IoTSRM2-based survey, and the delivery of these messages using the distribution channels decided on in Step I.1. Furthermore, our social media posts and private messages for requesting participation in our survey are designed to increase the response rate of our survey by employing several widely used techniques. First, our private messages leverage personalization for engaging with each of our target survey respondents as described by [PERSON] and [PERSON] (2016). Moreover, our social media posts and private messages apply three of the survey responses theories (i.e., exchange theory, self-perception theory, and commitment and involvement) studied by [PERSON] (2017). These theories were also employed in the study conducted by [PERSON] et al. (2018) to invite or induce participation as part of a laboratory-type experiment. Thus, besides providing key details on our IoTSRM2-based survey (e.g., the access link to our survey), our social media posts, and private messages feature a combination of the following techniques:  
* **Personalization:** the private messages are personalized for engaging with each of our target survey respondents by starting the message with an informal greeting (e.g., \"Hello [PERSON]\");
* **Exchange theory:** the private messages ask our target survey respondents to complete our survey and/or share it to the right individuals from their teams for getting access to our survey results once these get published (i.e., \"Once our next article is published, you will be able to benchmark your organization or client organization against peers\");
* **Self-perception theory:** the self-perception theory is applied as part of our social media posts by asking prestigious IoT-engaged leaders to complete our survey and/or share it to the right individuals from their teams, which labels them as being IoT  
\begin{table}
\begin{tabular}{p{42.7 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Research** & & & & \\
**Ques-** & **Research Question** & **IoTSRM2-Based Survey Question IDs** & **Potential Analysis Method** & **Potential Presentation of Results** \\ \hline RQ7.b & Which is the top region for the surveyed organizations of the top organization type by survey respondents? & & \% distribution of the survey responses by region for the surveyed type & Pie chart showing the \% distribution of the survey responses by region for the surveyed region for the surveyed region for the surveyed region for the surveyed region for the surveyed region for the targetengaged (i.e., \"we are please asking prestigious IoT-engaged leaders to share their views and or share our survey with the right people\");
* **Commitment/involvement:** our social media posts and private messages clearly articulate the importance of our IoTSRM2-based survey topic (e.g., \"IoTSRM2 relies on 25 IoT security best practices and is the result of an extensive research work\") and of participating in our IoTSRM2-based survey by getting the chance to have their opinions heard (i.e., \"Our survey seeks views from leaders from industries and governments on the IoT security risk management strategies of their organizations or client organizations\").