Which of the following is the BEST metric for evaluating the effectiveness of security awareness
twining? The number of:

A.
password resets.

B.
reported incidents.

C.
incidents resolved.

D.
access rule violations.

Explanation:

Reported incidents will provide an indicator of the awareness level of staff. An increase in reported
incidents could indicate that the staff is paying more attention to security. Password resets and
access rule violations may or may not have anything to do with awareness levels. The number of
incidents resolved may not correlate to staff awareness.