"Good advice changes something. Great advice changes the right thing."
Stakeholder Analysis and Engagement
Professor Sele: Every security consulting engagement involves multiple stakeholders — people and organisations with an interest in the outcome who will shape whether the recommendations are accepted and implemented. Understanding who those stakeholders are, what they want, and how to engage them is the difference between a report that changes things and one that doesn't.
Section 1 — What Is Stakeholder Analysis?
Stakeholder analysis identifies all parties with an interest in or influence over the security function or the consulting engagement, and assesses: their interest (what do they want from the security system?); their power (can they enable or block change?); their position (do they support, oppose, or are they neutral toward the proposed changes?); and their engagement need (what level and type of engagement do they require?).
Section 2 — The Stakeholder Matrix
Map every stakeholder onto a power × position grid. The combination of power and position determines the engagement strategy — high-power supporters become champions; high-power opponents must be engaged directly; low-power positions are monitored and kept informed.
| Power | Supportive | Neutral | Opposed |
|---|---|---|---|
| High | Engage closely — leverage their support | Brief regularly — build their support | Manage carefully — understand and address their concerns |
| Low | Keep informed — they may become influential | Monitor — minimal engagement required | Monitor — low priority but watch for escalation |
Section 3 — Engagement Strategies
High-power supporters: keep closely informed, involve in solution design, use their voice to champion the recommendations. High-power opponents: do not ignore — understand the basis of their opposition and address it directly; an unaddressed opponent can kill a recommendation before it reaches implementation. Low-power supporters: keep informed; they may amplify the message in their own networks. Low-power opponents: monitor; opposition can grow if the engagement is poorly managed.
Section 4 — Conducting Stakeholder Interviews
Stakeholder interviews are the primary engagement tool in most consulting engagements. Prepare tailored questions for each stakeholder based on their role and perspective. Conduct interviews individually and in confidence — group settings suppress honest input. Listen more than you speak — the interview is about understanding their perspective, not explaining yours. Document accurately — verbatim or paraphrased notes, taken during or immediately after the interview. Anonymise where appropriate — protect sources who have provided sensitive information.
- •Stakeholder analysis maps who has interest and power, and whether they support or oppose the proposed changes
- •The stakeholder matrix guides engagement strategy: high-power supporters and opponents both require close attention
- •High-power opponents can kill recommendations before implementation — address their concerns directly
- •Interviews must be individual, confidential, and well-documented
- •Stakeholder engagement is not optional — ignored stakeholders become blockers
"I was three weeks into a security governance review when I discovered that the finance director — who had not been included in the stakeholder list — controlled the budget that would fund every recommendation I was about to make. He had significant reservations about the proposed approach. I requested an urgent interview. His reservations were legitimate — two of my recommendations had not adequately considered financial sustainability. I revised them. The final report was approved with full budget commitment. If I had proceeded without engaging the finance director, I would have produced recommendations the organisation couldn't afford to implement."
Stakeholder analysis in a security consulting engagement involves: