Preventing Identity Theft in Your Business

APPENDIX ETHE SECURITY FOCUS GROUP INTERVIEW

Some of the exercises in these chapters may benefit from information known to departmental employees who are not members of the employee-manager team. A focus “group” interview is ideal for generating such information because focus interviews are semistructured and efficient, and several employees can participate at one time. Focus group interviews are idea-generating processes used typically to gather information from customers about the design or utility of a product or service. For identity security, the Business Information Security Program adapts and employs the focus group interview for use with employees to elicit information about which job tasks might require knowledge of or have access to personal identities.

A job’s title may suggest the job is a position of security, but job titles do not fully describe jobs. The focus group interview involves several employees in the same department and where work processes may be interrelated. Together, these individuals help to identify job positions that may frequently or infrequently use personal identities. Throughout, the center of attention is on the job and not the person who holds the job—it is the job’s process that is to be secured.

Focus group interviews, like brainstorming, follow a formal structure and also build on the synergy of group members. Use these instructions to conduct the focus group interview.

• Elect a team member who will serve as the “moderator.” The moderator’s ...