Our discussion centered around improving the security posture within an organization.
He told me that his group will query various divisions within the company, place the corresponding metric next to the division head’s name and distribute the score card to management. Since the division head managers are very competitive and do not wish to be seen in a negative light for performance reasons, the managers at the bottom will correct the issue and then score above the other division heads. When the metrics are recalculated and the new performance cards are distributed, the managers who are then on the bottom will forge ahead to the forefront. The happens ad infinitum until the issue is ultimately resolved and the metrics meet the necessary baseline across all divisions.
This may not apply to every company, but it is worth thinking about if one is in an organization that is highly competitive in nature.
(Note: I received Brad’s permission to publish this information at the reception.)