<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: implementing-security-champion-programs
description: >-
  Build and manage security champion programs that embed security advocates
  in business units, provide them with training and tools, track their impact,
  and create a distributed security culture multiplier effect.
domain: cybersecurity
subdomain: security-awareness
tags:
  - security-champions
  - distributed-security
  - culture
  - advocacy
  - training-the-trainer
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Implementing Security Champion Programs

## Overview

Security champion programs scale security culture by embedding trained advocates
in every business unit. Champions serve as local security contacts, escalation points,
and culture ambassadors. This skill covers program design, champion recruitment and
training, tooling, recognition systems, and impact measurement.

## Prerequisites

| Requirement | Install |
|---|---|
| Executive sponsorship | Leadership buy-in and resource allocation |
| Champion candidates | Volunteers or nominees from each business unit |
| Training curriculum | Champion-specific advanced security training |

## Commands

| Command | Description |
|---|---|
| `node agent.js design-program --business-units 8 --champions-per-unit 2` | Design champion program structure |
| `node agent.js recruit --criteria criteria.json --departments all` | Generate recruitment plan |
| `node agent.js train --cohort 2026-Q1 --modules advanced` | Build champion training curriculum |
| `node agent.js measure-impact --period 6m --champions active` | Measure champion program impact |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js design-program --business-units 8 --champions-per-unit 2
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js recruit --criteria criteria.json --departments all
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js train --cohort 2026-Q1 --modules advanced
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js measure-impact --period 6m --champions active
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
