1. What is a Lab?

2. Why use Lab Exercises?

3. Lab Exercises

Lab Exercise 1: Policy Communication

• Hypothesis: The use of marketing campaigns, rich content and results tracking can significantly reduce the risks of inadequate understanding, lack of attention, and lack of retention of compliance policies compared to the more common method of communicating policies via books, class training or e-mail.
  
  
• Lab Activities: Once you have registered, you will have the opportunity to configure this lab. Configuration includes selecting content types (i.e., sample policy communications on a specific topic such as data management) and adding additional participants to receive the communications. Once the configuration is complete, one e-mail per day for three days will be sent to each participant. The e-mail will contain directions on how to view and respond to a policy communication. The communication is a short Macromedia® Breeze™ presentation of a specific policy topic (e.g., acceptable use) with questions to verify comprehension. As the person that initiated the lab, you will also get to see results of who has viewed the policy communication and how well they comprehended the topic.

Lab Exercise 2: Surveying

• Hypothesis: The use of automated surveys is a more efficient and effective than using manual efforts to collaboratively inventory compliance practices and procedures or plan for incident responses.
  
  
• Lab Activities: Once you have registered, you will have the opportunity to configure this lab. Configuration includes selecting content types (i.e., surveys on a specific topic such as data privacy practices or planning for incident responses) and adding additional participants to receive the surveys. Once the configuration is complete, an e-mail will be sent to each participant. The e-mail will contain directions on how to view and respond to the survey. The survey is a short Macromedia® Breeze™ questionnaire about a specific topic (e.g., data security practices). As the person that initiated the lab, you will also get to see results of the survey.

Lab Exercise 3: Propose, Negotiate, Perform, Assure (PNPA)

• Hypothesis: The use of an automated PNPA process as described in Speech Act theory can reduce the time required to align on objectives, risks and controls, thereby reducing the cost and time to implement those controls and minimizing the overall risk..
  
  
• Lab Activities: Once you have registered, you will have the opportunity to configure this lab. Configuration includes selecting one of three content types for negotiation and determining the start date. Once the configuration is complete, an email will be sent to you inviting you to participate in a structured negotiation of a control specification. The lab starts with ComplyChain as a Sponsor partner identifying a problem area, proposing an objective, a solution to limit negative events and a response if the negative event were to occur. After you login, you will be presented with a Proposal form that has been populated with our thoughts on the above areas. You are free to change any of the fields and explain why you are making the change in the “Comments” field. Comments are required for “Counter Propose” and “Reject”. We look forward to your response .

4. Procedures

• Register: Our labs will use a variety of software products which require us to manage access; consequently, we need some basic information from you. If you are acting as a participant in our lab exercises you will also need to register on our Macromedia® Breeze™ implementation to receive communications. We respect your privacy and encourage you to read our Privacy Policy and Lab Terms of Service .
• Use the labs: We encourage you to explore the labs you believe will add value to your organizations compliance efforts. In many of our labs you may invite additional participants or you can fill multiple roles yourself.
• Provide feedback: In an effort to make these experiments valuable to others, we encourage your feedback via our ComplyChain Lab Blog. We have established topics for each lab as well as ideas for future labs.