Three levels, one set of measurements
Federated Practice Monitoring serves the security office, and it is meant to be practiced in a federated way as well. The same measurements are available at three levels.
- The organization. An auditor in the security office sees every team.
- The unit. An auditor scoped to a unit or division sees that unit's teams.
- The team. A resource team sees the signals for its own resources.
Why a unit should watch itself
A unit's leaders are accountable for what the unit runs, and they know its circumstances better than the security office does. With their own view, they can spot a team that is falling behind and help it before the matter reaches anyone else.
Why a team should
A team that can see its own signals knows what is pulling them down and what to do next. It can also see its own progress, and compare itself with peers.
This is knowledge at the point of decision. The people who can fix a problem are the first to see it.
What keeps it safe
Self-monitoring only works if a weak signal is safe to see. Signals are starting points for investigation, and a team that finds its own weak spot has done what the practice asks of it.
Visibility can be limited as well. Seeing a team's scores does not have to mean seeing the plans behind them, and an organization can decide how far an auditor's view extends.
What the security office gains
When units and teams correct themselves, fewer problems reach the center, and those that do are the ones that need it. The security office's attention goes to the teams that cannot recover alone. Deciding Where to Intervene describes how it chooses.