Security Awareness For Dummies

Appendix

Sample Questionnaire

Throughout this book, I highlight how important it is to know the culture of your organization, business drivers, stakeholders, and more. That is easy to say, but hard to accomplish. I have been developing and refining the questionnaire in this appendix for close to a decade. It provides a structured framework to collect information. Though a great deal of the information might appear to be basic and obvious, documenting it is still a critical task.

In general, you can send the questionnaire to the relevant individuals, but I don’t recommend doing so — the questionnaires are a way to start a conversation. I find that the content from the questionnaire takes up about one-third of the conversation. Ideally, the questionnaire serves as a conversation starter, and the resulting conversation is where the truly valuable information originates.

A good conversation develops rapport with stakeholders. Meeting with people can give them a sense of ownership in the effort, and they can become your biggest supporters.

As I mention in Chapter 9, start with a single awareness program to work out any kinks in the program. If this is your first time through, you should just collect for the entire organization any information intended for a single awareness program. ...