Lab Exercise 1 – Policy Communication

A. Hypothesis: The use of marketing campaigns, rich content and results tracking can significantly reduce the risks of inadequate understanding, lack of attention, and lack of retention of compliance policies compared to the more common method of communicating policies via books, class training or e-mail. Please suggest ways to improve this hypothesis to meet your needs.

B. Activities: Creating this lab includes selecting content types (i.e., sample policy communications on a specific topic such as security) and adding additional participants to receive the communications. Once the configuration is complete, one e-mail per day for three days will be sent to each participant. The e-mail will contain directions on how to view and respond to a policy communication. The communication is a short Macromedia® Breeze™ presentation of a specific policy topic (e.g., acceptable use) with questions to verify comprehension . As the person that initiated the lab, you will also get to see results of who has viewed the policy communication and how well they comprehended the topic. The initial content choices are as follows:

Security: This presents 3 short policies about computer use and password protection. It also highlights threats such as phishing and social engineering.

Administration: This presents 3 short policies that may be of more interest to systems administrators such as servers, vulnerability audits and wireless communication

Customer Service: This presents 3 short policies that an organization may require of a partner that provides some customer service for the organization. For instance, if a software company relies on VAR's or ASPs for support it may require certain levels of support.

Please suggest ways to improve the steps in the lab to add more value.

C. Your experience: Please tell us about your experience: do you agree with the hypothesis, what did you like and not like about the experience.