Chapter 4 — Human factors and cyber policy: core methods
Lesson map
Lesson 04 published. Map, example, EX016.
flowchart TD
N0["Learning outcomes"]
N1["4.1 A short survey"]
N2["Lab — Barriers among 126 staff responses"]
N3["4.2 Structured conversations"]
N4["4.3 Setting priorities"]
N5["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5
N5 --> EX["Worked example"]
EX --> Q["Exercise EX016"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["4.1 A short survey"]
N2["Lab — Barriers among 126 staff responses"]
N3["4.2 Structured conversations"]
N4["4.3 Setting priorities"]
N5["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX016"]
[Learning outcomes]
|
v
[4.1 A short survey]
|
v
[Lab — Barriers among 126 staff responses]
|
v
[4.2 Structured conversations]
|
v
[4.3 Setting priorities]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX016]
Learning outcomes
You will (1) run a short anonymous survey; (2) hold structured conversations; (3) turn findings into priorities.
4.1 A short survey
Grace runs a six-question anonymous survey asking staff whether they know how to report, what stops them, whether they have heard back after reporting, how confident they feel about phone requests and how much security effort they spend weekly. The tenants' panel reviews a separate two-question version for tenants. She receives 126 staff responses from 180. The lab counts the barriers staff selected. She shares headline results with all staff within two weeks, explaining what will happen next. The survey is anonymous. Staff representatives approve it.
Lab — Barriers among 126 staff responses
# Barriers among 126 synthetic staff responses (multiple choice).
b = {"unsure if worth reporting": 51, "never heard back": 38, "don't know how": 33, "too busy": 27, "fear of blame": 15}
for k, v in sorted(b.items(), key=lambda x: -x[1]): print(f"{k}: {v}/126 = {v / 126:.0%}")
Run with python3 lab_barriers.py. Verified output:
unsure if worth reporting: 51/126 = 40%
never heard back: 38/126 = 30%
don't know how: 33/126 = 26%
too busy: 27/126 = 21%
fear of blame: 15/126 = 12%
4.2 Structured conversations
Grace holds eight structured conversations of fifteen minutes with staff from different teams, using the same five questions each time and taking notes without names. Housing officers describe uncertainty about phone requests from relatives. Finance staff describe pressure from contractors demanding urgent payment. Several people say they reported a suspicious email once and never heard back. Structured conversations add reasons and stories to the survey numbers, while consistent questions make it easier to compare answers across teams. Notes are checked with each person.
4.3 Setting priorities
Grace combines findings into three priorities: make reporting easy with a button and quick replies; provide a clear procedure for phone requests about tenants; and introduce callback verification for contractor bank detail changes. Each priority answers both a common barrier and a stakeholder concern from chapter 2. She presents the priorities to managers with the evidence behind them. Managers approve them and assign a small budget, impressed that the priorities came from staff experience rather than generic advice. Work begins within a month.
Worked example
Grace surveys 126 staff, holds eight structured conversations and sets three evidence-based priorities.
Synthetic case. Data are synthetic.
Errors and limits
Self-report bias. Eight conversations are few.
Exercises
- EX016 — Response rate. What was the staff response rate? Rubric: 3 = 70%;; 2 = 126 of 180;; 1 = 126%;; 0 = none.
- EX017 — Lab top barrier. What was the top barrier in the lab? Rubric: 3 = unsure if worth reporting, 51 of 126;; 2 = uncertainty;; 1 = vague;; 0 = none.
- EX018 — Consistent questions. Why use the same questions in every conversation? Rubric: 3 = to compare answers across teams;; 2 = comparability;; 1 = vague;; 0 = none.
- EX019 — Phone priority. Which priority addresses phone requests? Rubric: 3 = a clear procedure for phone requests about tenants;; 2 = procedure;; 1 = vague;; 0 = none.
- EX020 — Results sharing. When did Grace share headline results with staff? Rubric: 3 = within two weeks;; 2 = two weeks;; 1 = never;; 0 = none.
Synthesis
Simple surveys and structured conversations produce priorities grounded in staff experience.
Continue studying — chapter 04 of 12
← Chapter 03 (draft) · Course chapter index · Chapter 05 (draft) →