Which of the following metrics would provide management with the MOST useful information about the progress of a security awareness program?

A. Increased number of downloads of the organization’s security policy
B. Increased reported of security incidents
C. Completion rate of user awareness training within each business unit
D. Decreased number of security incidents