What is Security and Me?

This is a questionnaire that explores each team member's individual motivation and approach to software security. It relates this to their security-related activities in their development work.

Why should I use this?

Security is not only technical. It is a multi-faceted concern that touches on who people are and what they think is important: in their daily work, in their particular jobs, and in their career.

This questionnaire helps participants identify attributes of their working life, and relates them about factors that may influence how security happens in their professional work. It provides a language for managers and teams to discuss how team members relate to security.

You can use it as a basis for discussions about different security-related roles in the team, about how team members might work together to achieve stronger security, and about how individuals can motivate and support themselves towards security.

When can it be used?

  • Free time, such as like 10% days,
  • Goal setting initiatives,
  • Away days, or
  • Whenever's convenient

To use this survey, you need:

  • Individual participants;
  • A printout of the questions and supporting materials (download pack) for each participant
  • Time (20 minutes or more) set aside for each to discuss the results. This discussion may be with the facilitator or team lead; or with another participant.
Security and Me
A diagram of personal horizons and security responses.
Download

Lopez, T., Weir, C., Tun, T., Cooper, H., Bandara, A., Levine, M., Nuseibeh, B. and Sharp, H. (2020) ‘Security and Me’, figshare [Online]. DOI: 10.21954/ou.rd.12213137 (Accessed Day Month Year).