See the Appendix for a sample set of interview questions CAPACITY ASSESSMENT CHECKLIST Summary A monolithic, one-time interview with key staff is not always possible or advisable, but interacting with a variety of staff exposes valuable information about every aspect of the audit, from vulnerabilities to capacity to hidden barriers. This serves as a "cheat sheet" of some topics to explore both during the planning and preparation phase and throughout the audit process. Walkthrough "Homework" Basic contact and organizational information: name, org, org's stated mission Contextual research Organizational Size of staff Key roles in org for tech and management Structure: Management and Technical? (Program size, activities, information) (Change management) Languages used in office Contextual / Background / Threat information What (if any) threats have occured to the organization and its partners? (digital, physical) Surveillance? What other threats are you concerned about? What has happened to other organizations in the space? Org responses to these threats - trainings, technical responses, organization process/change successes? Specific programs or other work outside of publicly stated mission that are high-risk Program use of technology (SMS surveys, blogs, facebook pages, other websites, media recording and broadcast ...?) Page 32 of 240