CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1396

Risk Response and Reporting

Which of the following BEST shows whether security awareness training is effective?

  • A Course evaluation
  • B User behavior after training
  • C User self-assessment
  • D Quality of training materials
Explanation

The most meaningful measure of security awareness training is observable user behavior after training, because it demonstrates whether users apply secure practices in real situations.

Community Discussion

No comments yet. Be the first to start the discussion!