Which of the following would be the BEST indicator that a recently implemented security awareness training has been effective?

The correct answer is B. There has been an increase in security incidents reported by users. A successful security awareness training program should increase user awareness, leading to more reported incidents as employees recognize and report suspicious activities. This indicates that the training has been effective in improving security vigilance. A reduction in…

Submitted by cyberguy42· Apr 18, 2026Information Security Program Development and Management

Question

Options

AThere has been a reduction in security incidents reported by users.
BThere has been an increase in security incidents reported by users.
CEmployees have signed an acknowledgement of the security policy.
DEmployees have completed security awareness training sessions.

How the community answered

(41 responses)

A
12% (5)
B
78% (32)
C
7% (3)
D
2% (1)

Explanation

A successful security awareness training program should increase user awareness, leading to more reported incidents as employees recognize and report suspicious activities. This indicates that the training has been effective in improving security vigilance. A reduction in reported incidents could mean unawareness rather than improvement, and simply signing acknowledgments or completing training does not directly measure effectiveness.

Topics

#Security Awareness Training#Effectiveness Measurement#Security Incident Reporting#Security Program Metrics

Community Discussion

No community discussion yet for this question.

Full CISM Practice