CISM Certified Information Security Manager – Question0598

Which of the following is the BEST metric for evaluating the effectiveness of security awareness twining? The number of:

A.
password resets.
B. reported incidents.
C. incidents resolved.
D. access rule violations.

Correct Answer: B

Explanation:

Explanation:
Reported incidents will provide an indicator of the awareness level of staff. An increase in reported incidents could indicate that the staff is paying more attention to security. Password resets and access rule violations may or may not have anything to do with awareness levels. The number of incidents resolved may not correlate to staff awareness.