Resources for the global digital safety training community.
Credits
Last Updated 2016-03The task of putting yourself, your training participants, and (sometimes) training event organizers on the same page early on before an event can be a difficult one - this resource contains some helpful approaches for facilitating those discussions.
Setting expectations for organizers and participants is possibly only after accepting the first set of expectations you need to have in place - what you can reasonably expect yourself to be able to do?
We do a massive disservice to the people we support as trainers if we are not prepared to be realistic about our own capabilities - this is particularly true in the preparation stage before a workshop.
If you’ve been asked to provide a training for 20 participants, in 2 days, by yourself, the scope of what you can accomplish will be far more limited than if you’ve been asked to provide a training for 12 participants, over 4 days, with a co-trainer. Unless you take pause to consider these personal limitations, you run the risk of not being able to deliver what you’ve promised.
This is why having a solid sense of your own limitations, and accepting what you can and cannot do before you set and manage the expectations of participants and organizers, is crucial. Take a look at the article on When You Are Out Of Scope from the Security Education Companion as well.
Managing the expectations of participants effectively can be either very easy or a bit difficult, depending largely on how early on they become involved in your process for the design and content of a training. Frequently, due to limited pre-training communications for safety reasons, or organizers acting as a go-between for trainer and participants for logistical reasons, trainers have little access to maximum participant input leading up to an event.
For this reason, it’s best to always be prepared with ways to create this involvement at the start of a workshop, regardless of how much or how little communication you’ve had with participants ahead of time.
One way to ensure that participants are immediately involved in your event is to start by utilizing an activity that helps you check in with the participants’ expectations and negotiate with them about their expectations and agenda. Giving participants a say in what you’ll cover has at least two benefits:
This second benefit is especially important for digital security trainings. Trainers must be able to manage participants’ expectations about their digital safety, because the belief that everything they will learn from your workshop is all that they need to know about digital security will put them at risk.
Similarly, if you overpromise (intentionally or accidentally, by not managing expectations), participants may develop a negative impression of digital safety that can make them more vulnerable in the long run when those heightened expectations are not met.
However, this doesn’t mean the situation is hopeless or that taking steps to increase your digital safety doesn’t make a difference. A good example of this is the case for strong passwords. The “security” provided by strong passwords has much less to do with unbreakability and more to do with resilience: the more effort and resource it takes for an adversary to crack a password, the more time it will take. By pairing a strong password with strong password practices (i.e. periodically changing them), you’ve already changed over to a new password by the time this same adversary has come anywhere close to cracking the previous one.
The tools, services, and devices we use will change. Governments and hostile actors have a stake in defeating secure tools and software, and will always employ considerable resources to do so. The popular digital services (e.g., Google, Facebook, etc.) will continue to change their security and privacy policies, usually in ways that reduce protections for their users. The ways we use digital tools and services will always change too — and every change usually brings more or different security risks.
Secure communications, for instance, depend on everyone involved for them to provide privacy from end-to-end. If you encrypt a document, but the person who will receive it is not ready for encryption, then your encryption won’t work. No matter how much you try to protect your information on social media, your ‘friends’ will tag your photos, reveal your locations, or divulge things about you.
Using these narratives as an expectation-setting framework at the outset of a training, a trainer could now reasonably focus on three main goals:
It’s always a good idea to help the organizers manage their own expectations about the event, long before you start the workshop. As mentioned above, setting and managing such expectations is intertwined with awareness and acceptance of your own limitations. At the outset, you should explain to organizers what makes a successful training, along with what you can and cannot do vis-a-vis established parameters such as time, number of participants, and resources.
Have organizers balanced the goals to be achieved through the workshop against the parameters of time that is available, the number and background of people who will attend, and the financial and human resources they have provided?
The more training goals that are outlined by organizers, the bigger the training team required in order to accommodate these expectations must be. This acknowledges that it can be quite difficult to find a single person who is an expert in teaching all the topics required for fully-fledged digital security training well. Some trainers are better at a handful of topics, some at others - this is another crucial component of recognizing your own limitations as well. Be realistic about which topics you feel confident training on, and which might be better handled by another trainer or in another, later workshop.
Similarly, the more participants there are who will attend a training that includes hands-on tools training, the bigger the training team required. In an ideal world, there is 1 trainer for every 3 - 4 participants - this means that 4 participants is the ideal maximum that 1 solo trainer can focus on to ensure maximum learning for each participant. More in-depth, technical trainings require more hands-on exercises and sessions; it is impossible to expect a single trainer to pay attention to 12 participants during such intensive sessions. The further you get away from a ratio of 1 trainer for every 4 participant in a hands-on training, the more you risk leaving participants behind.
Situations like the above will invariably require that less material be covered overall, to ensure that the quality of learning on what can be covered remains as high as possible. This is where having a co-trainer is especially important: a co-trainer can be a participant or a member of the community who’s technically proficient and perhaps familiar with the material you’re teaching. This person can be enlisted to help assist participants during hands-on sessions.
The more days there are for the workshop, the more prep days you’ll need. Each full session generally takes at least 1 day to comfortably finalize: half a day to design, and another half day to source materials, and to prepare presentations and/or lectures. A standard 4-day digital security training with about 6 to 8 individual sessions will require at least 6 to 8 days of preparation for a single trainer - not to mention the time required to incorporate these sessions into a larger overall workshop structure.
…and again, as with other parameters - the more days for the training, the bigger the training team should be. In addition to ensuring the best training possible for participants, this also provides humane working conditions for trainers. Having a single trainer covering a 4-day workshop will drain their physical and mental energy very quickly. When a trainer is exhausted, the less they are able to maintain the patience and energy needed to support participant learning and maximize their engagement.
Ideally, as a trainer you will speak the same language as the training participants; if not, suggest that organizers find a qualified trainer who does. But if the training must be translated, it’s important to establish well ahead of time what kind of translation is available. Translation will cut the amount of time you have for the training in half, as everything that is spoken must then be spoken once more for translation purposes. It is also advisable to find local qualified co-trainers who can also help you for hands-on sessions.
So, all said and done, some questions that trainers can ask organizers that can help identify the organizers’ overall expectations for the workshop include:
the negotiation can go a number of ways as you work with the organizers to create a training that is as good as it can be given various goals and limitations. Remember to be clear with what you can and cannot do, and what the outcomes of the training are likely to be. For similar guidance and advice, please see the event planning and agenda planning guides.