Assume you decided to do an independent research study as part of your degree (i.e., a 3-credit independent research course) and that the focus of your project is to make recommendations to the SEC on how publicly traded corporations could improve the disclosure of cybersecurity risks and cyber incidents. Your recommendations, however, would be based on more than your own understanding of the issues involved in disclosing cybersecurity risks and cyber incidents. In fact, in proposing your independent research project, you have committed yourself to designing and conducting an empirical study to assist you in coming up with recommendations to the SEC.

Briefly discuss the potential design and methodology for conducting the empirical study contained in your proposed research project.