A company has recently begun to provide internal security awareness for employees. Which of the following would be used to demonstrate the effectiveness of the
training?

A.
Metrics
B.
Business impact analysis
C.
Certificate of completion
D.
Policies