I like the use of the Johari Window model for this purpose. Might also be useful to do a Johari Window for Threats and/or vulnerabilities.