A company has recently begun to provide internal security awareness for employees. Which of the
following would be used to demonstrate the effectiveness of the training?
A.
Metrics
B.
Business impact analysis
C.
Certificate of completion
D.
Policies