Which of the following is the BEST indication that an information security awareness program is effective?

The correct answer is C. A reduction in the success rate of social engineering attacks. A reduction in the success rate of social engineering attacks is the best indication of an effective security awareness program because it directly reflects user behavior change and increased vigilance - which are core goals of awareness efforts.

Submitted by satoshi_tk· Apr 18, 2026Information Security Program Development and Management

Question

Options

AA reduction in the cost of maintaining the information security program
BA reduction in the number of reported information security incidents
CA reduction in the success rate of social engineering attacks
DA reduction in the number of information security attacks

How the community answered

(53 responses)

A
2% (1)
B
6% (3)
C
91% (48)
D
2% (1)

Explanation

A reduction in the success rate of social engineering attacks is the best indication of an effective security awareness program because it directly reflects user behavior change and increased vigilance - which are core goals of awareness efforts.

Topics

#Information Security Awareness#Security Training Effectiveness#Social Engineering#Security Program Metrics

Community Discussion

No community discussion yet for this question.

Full CISM Practice