Which metric is the BEST indicator that an update to an organization’s information security awareness strategy is effective?

A. A decrease in the number of incidents reported by staff
B. A decrease in the number of email viruses detected
C. An increase in the number of email viruses detected
D. An increase in the number of incidents reported by staff