A security team has established a security awareness program. Which of the following would BEST prove the
success of the program?
All types of training should be followed up and tested to see if it worked and how much was learned in the
training process. You must follow up and gather training metrics to validate compliance and security posture. By
training metrics, we mean some quantifiable method for determining the efficacy of training.