Overview

The importance of evaluating your educational program cannot be overemphasized. Oddly enough, this critical task is often neglected or given little thought. As educators, we must be able to demonstrate that what we are doing has value for the organization and its employees. We must be able to show that security education is essential to the mission of the organization, whatever it may be. This is a tall order, and as with the delivery of the education, awareness, or training itself, it requires careful thought and a realistic strategy.

Regrettably, some practitioners tasked with providing security education embrace the view that security education (even other security activities) is being carried out simply to comply with some regulation or policy imposed by a higher authority. This unfortunate attitude filters down to the workforce and creates an atmosphere that is both almost beyond repair and, in some situations, dangerous. A compliance-based security education program that meets only minimum standards hardly needs evaluation. It is a failure by definition. A mission-driven program, however, depends and thrives on systematic evaluation, not only to become more effective, but to compete successfully for adequate resources to remain viable. Program evaluation documents and proves to both management and the workforce that security education adds value to the organization and that it, as part of the overall security program, is a mission-critical function.

What does it mean to evaluate an educational or awareness program? How do you judge whether your program is a "success" by having...