Assessing Policy Awareness

You can use the system to assess your organization's awareness of a specific policy. Once a policy is created (and usually after it has been deployed), you can create a questionnaire that asks specific questions about the policy and launch an assessment that gathers data from specified questionnaire responders.

 To create a policy awareness campaign: 

1. Create and deploy the policy. See Creating a New Policy for more information. 

2. Create a policy-awareness questionnaire: 

   1. Click the Content tab > Controls & Questionnaires.
   2. Navigate the tree to Organization Content > Questionnaires.
   3. Click the New Questionnaire button. Give the questionnaire a name and description, as usual, and choose "Policy Awareness Campaign" as the questionnaire type. (See About Controls and Questionnaires.)
   4. The second tab changes to "Select Policies" when the questionnaire type is Policy Awareness Campaign. Select the policy created in the first step. Only approved policies are shown, by default.

   5. Enter questions for the policy-awareness questionnaire. Click Finish.
      

3. Create a Policy Awareness Campaign program. See About the Program Wizard for more information. 
   1. Click the Assessments tab > Programs.
   2. Click New to create a new Policy Awareness Campaign type program.
   3. Follow the New Program wizard. On the Risks & Controls step of the wizard, click the policy-awareness questionnaire that you created in step 2. 
   4. Navigate to Controls > Organizational Content > Questionnaires.
   5. Select account Entities representing users in the system. The questionnaire will be sent to one or more owners of these account entities for their response, depending on the assessment workflow used for the program.

Once the program is launched, the specified users will receive the questionnaire and the policy.

You can build policy awareness questionnaire reports to see how many users are in compliance.