Chapter 36 — Field or community practice

Chapter 36 — Field or community practice

Lesson map

Lesson 36 published. Map, example, EX106.

flowchart TD
  N0["Learning outcomes"]
  N1["36.1 Community placement"]
  N2["36.2 Simple guidance"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3
  N3 --> EX["Worked example"]
  EX --> Q["Exercise EX106"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["36.1 Community placement"]
  N2["36.2 Simple guidance"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> Q["EX106"]

[Learning outcomes]
    |
    v
[36.1 Community placement]
    |
    v
[36.2 Simple guidance]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX106]

Learning outcomes

You will (1) apply GRC skills in a community setting; (2) adapt guidance for very small organisations; (3) respect the limits of volunteer help.

36.1 Community placement

Sofia volunteers with a local tenants' association linked to Elmfield. It has a committee of eight volunteers, a laptop, a shared email account and a spreadsheet of member contacts. Its needs are small but real: it holds personal data and handles small amounts of money. Sofia learns that frameworks designed for organisations with staff and budgets must be adapted heavily for groups like this, focusing on a handful of high-value actions. Her chosen actions focus on the shared email account and the contact spreadsheet, the two places where members' data sit.

36.2 Simple guidance

Sofia writes a one-page guide: give each committee member their own account instead of sharing one, turn on multi-factor authentication, keep the member list in one place with access for two people, back it up monthly and delete contacts of people who have left. She draws on the NIST CSF 2.0 small business quick-start materials but simplifies further. The committee adopts four of the five steps immediately and agrees to revisit the fifth. The member list with access for two people, for example, keeps the group running if one volunteer leaves.

36.3 Limits

Sofia is careful about limits. She does not access members' personal data herself, does not set up accounts using her own credentials and does not promise ongoing support she cannot provide. Instead she teaches two committee members to do each step. She learns that volunteer help should build the group's own capacity rather than create dependence, and that good intentions must be matched by clear boundaries and handover. Teaching two committee members each step means the guide survives her leaving the placement.

Worked example

Sofia writes a five-step guide for a tenants' association, sees four steps adopted and builds the committee's own capacity.

Synthetic case. The association is synthetic; CSF 2.0 resources are real.

Errors and limits

Volunteers change often. Simple guidance omits risks.

Exercises

• EX106 — Shared account fix. What replaced the shared email account? Rubric: 3 = individual accounts for each member;; 2 = own accounts;; 1 = vague;; 0 = none.
• EX107 — Steps adopted. How many guide steps were adopted immediately? Rubric: 3 = four of five;; 2 = 4;; 1 = 5;; 0 = none.
• EX108 — Volunteer boundary. Why did Sofia teach members instead of doing the work herself? Rubric: 3 = to build capacity, not dependence;; 2 = capacity;; 1 = vague;; 0 = none.

Synthesis

Community GRC work adapts guidance to tiny organisations and builds their own capacity.

Continue studying — chapter 36 of 40

← Chapter 35 (draft) · Course chapter index · Chapter 37 (draft) →