# Introduction

*Please note that this first version of the English manual was created with machine translation from the Dutch version. (on September 10, 2024)*

The Canvas Method for Information Security is a workshop-based approach through which teams learn to recognize and address information security risks in their work and work environment. This is important because 80% of data breaches can be traced back to human actions.

In a structured dialogue, concerns and perceived risks are explicitly identified, and risk-reducing measures are recognized and made measurable. Teams become aware of their own responsibility for information security and privacy, and develop ownership.

The result is a significantly increased risk awareness among employees and the internalization of policies within business processes.

The Canvas Method implements a PDCA cycle for the continuous improvement of information security and privacy, thus fulfilling an important part of NIS 2, GDPR, and ISO 27001. The Canvas Method easily integrates with existing management systems within the organization.

Here's a [short video](https://www.youtube.com/watch?v=Gy-yQ2UbSzA) highlighting the use of the Canvases in the domain of information security.

Website: [https://canvasmethod.org](https://canvasmethod.org/)

## Contributions

Like all materials, this guide for the Canvas Method is published under Creative Commons ([CC BY-SA 4.0](http://creativecommons.org/licenses/by-sa/4.0/)). Contributions and suggestions for improvement are encouraged! You can do this via [GitHub](https://github.com/rkranendonk/canvasmethod) or by sending an email to <richard@thinkingsecurity.works>.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.canvasmethod.org/readme.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
