CISM Question 196

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The number of reported incidents shows a behaviour change in the staff due to the awareness trainings they received. These reports came in from staff members of the company which means they are wiser to phishing and other cyber attempts.

• Chose D2

  The correct answer is D. The number of reported security incidents. Explanation: The number of reported security incidents provides the best measurement of the effectiveness of a security awareness program. An effective security awareness program aims to educate employees and users about security best practices, policies, and procedures. When users are more aware of security risks and how to respond to them, they are more likely to report suspicious activities or potential security incidents.

• 1

  I think C is not a correct answer; C may be correct answer if ask to measure the effectiveness of Security Response Program. But here the question is to measure the ffectiveness of Training program