Role

Workshop Facilitator

Collaborators

Duration

1 week

Co-Facilitator/UX Researcher - Nick Stiles

Security Program Director - John Jones

Platform Security Focal Program Lead - Kevin Dunstan

Photos by Cris Gonzalez

Not all heroes wear capes

Long story short, Security Focals have it rough. Not only are they in charge of security and compliance and preventing serious data breaches, but they are also not an officially recognized role within our organization - often leading to them taking on more responsibilities than they can handle

Defining the problem

In 2023, an annual survey was conducted with 77 Security Focals to understand employee satisfaction and pain points. The three lowest scored items from the survey indicated that there were improvements to be made to increase efficiency

Results from 2023 Annual Cloud Security Focal Survey

When digging deeper into the data, we learned that only 5% of Security Focals are assigned only Security Focal Role responsibilities and 79% of respondents spend 26% or more of their time supporting compliance activities, including direct or indirect audit support*.*

Goals

The top responses from the employee survey clearly demonstrated a need for better tooling and more efficient use of time. To uncover the pain points and areas of improvement, we flew in security focals from across the country to engage in a 4 day design thinking workshop.