The Privacy Professor's Security Search #1: At The Office
This engaging learning exercise is based on a wildly successful program Rebecca developed for one the
world’s leading financial institutions. Its primary activity tool is an interactive poster featuring cutaways of an
office building with a myriad of visible information security and privacy risks. Your employees will learn by
searching for the risks illustrated within the poster, working in teams or individually, based upon your
organization’s learning objectives.  

This training tool’s highly detailed illustrations are of people and work areas, as well as the immediate
surroundings of a typical office building. The poster is 19” x 27” – big enough to clearly identify all of the
elements (similar to the detail in a Where's Waldo book), and is produced on heavyweight paper (made with
recycled materials), so you can use it not only for this exercise, but as a lasting, posted reminder of
information and privacy security situations.
Employees of all levels, in all fields, learn to identify security and
privacy issues in their own situations.
Security Search creates cohesiveness among team members
and facilitates interactive learning.
Team members work at their own pace, on their schedules. Daily
applications last long after training.
Key benefits of The Privacy Professor's Security Search #1: At the Office
“The Security Search exercise
was completed this past month.  I
did a final presentation on the
findings of the security walk
through this past week.  It was an
extremely beneficial exercise.  
Thank you so much for putting it
together and including so much
detail for me to follow.  I really
appreciated that you thought out
all of the steps for me.  Each
member of the winning team
received a 2 Gb password
protected USB with a logo created
by our hospitality group’s artist.  It
included the logos for each of the
companies that Greenleaf
Companies supports and had the
initials “WWDFD” on them for
“What would Dr. Faith Do.”  We
have ordered Post-It notes with
the same logo on it for use
whenever we see someone’s
computer unlocked or any other
risk.  Thank you for producing
such high quality products!”  

- Dr. Faith Heikkila, CISO,
Greenleaf Companies
© 2013 Rebecca Herold & Associates, LLC.  All rights reserved.
 Privacy Policy  
 Email Rebecca Herold

  • Meets regulatory, legal and contractual training requirements
  • Actively engages personnel to effectively and measurably improve security and privacy practices
  • Teaches participants how to identify and address security and privacy risks within their office building
  • Encourages fun while learning!

Press the Play button to learn how Security Search #1: At the Office can benefit your organization's security and privacy programs.

Sounds good!  Contact me to place an order
What’s included in the package

  1. Illustrated learning tools and posters – multiple options are available for a variety of organizational sizes  
  2. Answer key and corresponding descriptions for each risk
  3. An answer sheet template for learning participants to use to provide their descriptions of the risks
  4. Metrics tools to measure awareness before and after the exercise to determine increase in awareness as a result of the learning exercise
  5. Project plan and timeline identifying key activities before, during and after the learning exercise
  6. Sample memo from the organization leader  to managers to announce the learning exercise
  7. Sample memo with instructions to managers for initiating the exercise with participants
  8. Learning exercise response grading instructions
  9. Communications to send to participants in the weeks/months following the training exercise to reinforce each key training topics
  10. Winning team and participant prize suggestions
  11. Tips for success

Why this program is effective

In the 1950s, Ph.D. Benjamin Bloom assembled a group of celebrated educational psychologists to study the elements of learning and
associated behaviors. The team’s results – the widely accepted standard – identify three components: cognitive (knowledge), affective
(attitude), and psychomotor (skills).

The Privacy Professor's Security Search #1: At the Office provides your staff learning experiences at the highest levels within all
three domains – for analysis, integration and evaluation. Most other information security and privacy training and awareness products
only deliver on one, and sometimes two, of the lowest levels.  

This means your employees will be more actively involved in the learning process, making the experience more effective, and resulting in
measurable improvements in protecting information in everyday situations.


Case study

Rebecca originally used this type of learning exercise with over 130 teams within a company’s organization, located at multiple
geographic locations. Teams had a week to fill out their answer sheets with all of the security infractions and risks they could identify
on the learning poster without knowing how many risks there actually were.

Nearly 100% of teams actively participated in this exercise and the response was unconditionally enthusiastic. Several of the teams had
fun with their “infraction” answers (e.g., "a man wearing a plaid jacket with mismatched striped pants"). Others delved so deeply into the
exercise that they identified additional security problems not even purposefully planned into the poster!

Program Results and Benefits:

  • Teams were actively engaged in thinking critically about the vast range of information security issues within a business.
  • Participants talked with their coworkers about the situations, engaging in friendly debate about whether each should actually be a risk.
  • Staff began talking with their managers about their own related situations, thus bringing potential issues to the forefront.  
  • Many units updated their department procedures after realizing some of the situations presented were similar to risks in their own areas.
  • Employees began talking in the cafeteria, hallways, gym and meeting rooms about information security and privacy issues during
    passing conversations.
  • The information security intranet website started getting an influx of hits – levels never seen before.
  • The information security area began receiving additional calls and emails about potential security issues.
  • Many of the areas left the poster hanging in their area for months – even years – following the exercise, facilitating ongoing awareness.


Which Package Should You Select?

Order the package that will best fit with the size of your organization, and how many functional areas you have. The optimum number of
members per team is 10, but it will work to have anywhere from five to 20 people on a team.

Examples:
  • If you have an organization of 2,000 personnel in one location, order Package F.  
  • If you have 40 employees in four locations, order Package B.
  • If you have 800 employees in two locations, order Package E or F, based upon how many teams you wish to create.
  • For more help, contact The Privacy Professor® at rebeccaherold@rebeccaherold.com.

The Bottom Line

Engaging activities make a positive impact on security and privacy practices. This is precisely why Rebecca created the Privacy Professor's
Security Search #1: At the Office. It can make a significant difference in your organization as well.

(In fact, the “At the Office” version has proven to be so effective that Rebecca is now in development of exercises for additional settings.)

Measurably raise awareness! Challenge your personnel to think about the issues, and discuss them with their coworkers for
ongoing and enhanced learning! Order The Privacy Professor's Security Search #1: At the Office today and get started.
Sign Up For Free Monthly Privacy Awareness Tips
Email:  
For Email Newsletters you can trust