Lab Exercise 2 - Surveys

A. Hypothesis: The use of automated surveys is a more efficient and effective method than using manual efforts to collaboratively inventory compliance practices and procedures or plan for incident responses. Please suggest ways to improve this hypothesis to meet your needs.

B. Activities: Creating this lab includes selecting content types (i.e., surveys on a specific topic such as security, incident response or customer service) and adding additional participants to receive the surveys. Once the configuration is complete, an e-mail will be sent to each participant. The e-mail will contain directions on how to view and respond to the survey. The survey is a short Macromedia® Breeze™ questionnaire about the topic you selected. As the person that initiated the lab, you will also get to see results of the survey. Please suggest ways to improve the steps in the lab to add more value.

C. Your experience: Please tell us about your experience: do you agree with the hypothesis, what did you like and not like about the experience.

Lab Exercise 1 – Policy Communication

A. Hypothesis: The use of marketing campaigns, rich content and results tracking can significantly reduce the risks of inadequate understanding, lack of attention, and lack of retention of compliance policies compared to the more common method of communicating policies via books, class training or e-mail. Please suggest ways to improve this hypothesis to meet your needs.

B. Activities: Creating this lab includes selecting content types (i.e., sample policy communications on a specific topic such as security) and adding additional participants to receive the communications. Once the configuration is complete, one e-mail per day for three days will be sent to each participant. The e-mail will contain directions on how to view and respond to a policy communication. The communication is a short Macromedia® Breeze™ presentation of a specific policy topic (e.g., acceptable use) with questions to verify comprehension . As the person that initiated the lab, you will also get to see results of who has viewed the policy communication and how well they comprehended the topic. The initial content choices are as follows:

Security: This presents 3 short policies about computer use and password protection. It also highlights threats such as phishing and social engineering.

Administration: This presents 3 short policies that may be of more interest to systems administrators such as servers, vulnerability audits and wireless communication

Customer Service: This presents 3 short policies that an organization may require of a partner that provides some customer service for the organization. For instance, if a software company relies on VAR's or ASPs for support it may require certain levels of support.

Please suggest ways to improve the steps in the lab to add more value.

C. Your experience: Please tell us about your experience: do you agree with the hypothesis, what did you like and not like about the experience.

Lab Exercise Hypotheses

For the past three years we have focused on the application of technology to various aspects of compliance and building trust among partners. This Lab is an opportunity to expose some of the ideas we have run across to see if they may be valuable for you. But more importantly, it is an opportunity for you to suggest problems you are encountering or suggest your own hypothesis for us to create a lab exercise. We have a good deal of experience with a variety of technologies that can help reduce risks and costs of compliance including: BPM technologies, portals, learning management systems, risk management systems, monitoring & control systems and collaborative tools and encourage you to suggest problems you are encountering or ideas for a new Blog. We will be happy to see if we can create a test for your needs.


Each lab that we create will have a hypothesis and we encourage you to comment on the applicability of these hypotheses to your needs and to submit hypotheses to this blog for future exercises. The following are the hypothesis for our current Lab exercises and some planned hypothesis.

Lab Exercise 1: The use of marketing campaigns, rich content and results tracking can significantly reduce the risks of inadequate understanding, lack of attention, and lack of retention of compliance policies compared to the more common method of communicating policies via books, class training or e-mail.

Lab Exercise 2: The use of automated surveys is a more efficient and effective than using manual efforts to collaboratively inventory compliance practices and procedures or plan for incident responses.

Planned Exercise 3: The use of Speech Act Theory can reduce the time to align on objectives, risks and controls, thereby reducing risks while reducing the cost and time to implement controls.

Potential Future Exercise X: The use of a collaborative system of compliance can greatly improve customer service in situations where organizations are dependent on partners for certain customer service activities.

Potential Future Exercise: Please submit your challenges and hypothesis

Lab Exercise Hypotheses

For the past three years we have focused on the application of technology to various aspects of compliance and building trust among partners. This Lab is an opportunity to expose some of the ideas we have run across to see if they may be valuable for you. But more importantly, it is an opportunity for you to suggest problems you are encountering or suggest your own hypothesis for us to create a lab exercise. We have a good deal of experience with a variety of technologies that can help reduce risks and costs of compliance including: BPM technologies, portals, learning management systems, risk management systems, monitoring & control systems and collaborative tools and encourage you to suggest problems you are encountering or ideas for a new Blog. We will be happy to see if we can create a test for your needs.


Each lab that we create will have a hypothesis and we encourage you to comment on the applicability of these hypotheses to your needs and to submit hypotheses to this blog for future exercises. The following are the hypothesis for our current Lab exercises and some planned hypothesis.

Lab Exercise 1: The use of marketing campaigns, rich content and results tracking can significantly reduce the risks of inadequate understanding, lack of attention, and lack of retention of compliance policies compared to the more common method of communicating policies via books, class training or e-mail.

Lab Exercise 2: The use of automated surveys is a more efficient and effective than using manual efforts to collaboratively inventory compliance practices and procedures or plan for incident responses.

Planned Exercise 3: The use of Speech Act Theory can reduce the time to align on objectives, risks and controls, thereby reducing risks while reducing the cost and time to implement controls.

Potential Future Exercise X: The use of a collaborative system of compliance can greatly improve customer service in situations where organizations are dependent on partners for certain customer service activities.

Potential Future Exercise: Please submit your challenges and hypothesis

ComplyChain Labs Blog - Welcome

Thank you for taking a look at our ComplyChain Lab Blog. We have created our Lab as a place for you to come and test how different technologies may help you reduce risks and the cost of compliance. Three business pressures including: increasing regulation, increasing value in sharing sensitive electronic information, and an age-old need to be efficient about resources compelled us to develop this Lab. Based on our understanding of these trends, we felt the time was right to have a facility where people could test how technology could help them optimize their performance with these pressures.

We want this lab to be driven by your needs and have created this blog in an effort to develop a community around exploring how technologies can help you reduce risks and costs. We will seed the blog with our thoughts on ways that technology might benefit you, but the real value of the blog will come from your ideas on the value of certain exercises and the suggestion of new exercises. We encourage you to explore our Lab and comment on or suggest refinements to current exercises or suggest new exercises.

The basic organization of the blog includes a section on lab exercise hypothesis and sections on each exercise. The section on lab exercise hypothesis will list current and planned hypothesis. We invite your thoughts on how applicable these hypotheses are to you. More importantly we would like your ideas on compliance or trust problems you may be encountering and how technologies might help solve the problem. In addition, to this high level section, each lab exercise that we create will have its own section. In these sections, we encourage your comments on the value of the exercise, how we might change the exercise to create more value and