- your defined goals and targets;
- your target groups;
- the different activities and when they are to be done;
- when to measure your progress
The purpose of the Planner module is to create an overview of the different activities you plan to use, spread out over the course of your timeframe.
An overview of the Planner
In the planner module a detailed plan based on goals, target groups and topics for the security culture work is drawn. Instruments, activities, target groups creates a starting point for a detailed time schedule.
The planners’ structure and content consists of 3 main elements.
The 3 elements can be broken down in smaller pieces to give a better overview.
Here are the instruments to reach the goals defined. Goals, topics and target groups are used to define which activities done by whom at what time. There are many vendors of activities, both standardized in stock and tailor-made products. This has to be defined by the user of the framework.
The framework recommends that activities and instruments are set up as a timeline.
A timeline for metrics is used to define when metrics is going to be conducted.
A detailed plan with time schedule for what is going to be measured – and when – is created based on the parameters under the module Metrics.
Being conscious about the time it takes to collect, organize and analyze data is important. It’s important that the time schedule contains an action plan for this. It’s recommended to define milestones after when metrics is scheduled done, and then collect data up front.
Metrics of campaigns is recommended done once before the campaign, and once right after to see the immediately effect. It’s also recommended to measure after some time again to see if the effect is sustainable or decreasing.
Remember that the purpose of metrics is to create a better understanding of which measures that works, and how they works.
In The Security Culture Framework is metrics about doing necessary adjustments to achieve wanted results.
It’s natural that the revisions is done after a measurement of a campaign and before a follow up campaign is initiated.
In the organization module different target groups within an organization was defined and mapped.
It’s useful to organize the different activities in target groups so it is easy to have overview and control on what activities done for the different groups, how long they are going on and what measures done.
Time schedule and order
Being conscious about the order is important when a time schedule is created.
By organizing in campaigns and target groups is it easier to have a good overview. Users of The Security Culture Framework are urged to use the tool they prefer. Many users say that a project management tools is the best for them.
Suggested working method
- Define the timeframe for the campaign
- Set up activities and instruments based on target groups
- Create timeline(s) for the different activities. Mark when they will be done, how they will be done, who the receivers are and who is responsible for the accomplishment.
- Create a timeline for metrics. Mark milestones based on the goals. Set aside time up front for the milestones to work with the data collection and analyze.
- Set up a timeline for revisions.