CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following provides the BEST evidence that a security awareness program is effective?

A An increase in the number of user-reported security issues
B A decrease in the number of security threats
C An increase in the number of key performance indicators (KPIs)
D A decrease in the number of failed login attempts

Explanation

An increase in user-reported security issues shows that users are more likely to recognize potential security concerns and promptly report them, which is a direct intended outcome of security awareness training.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ232

Community Discussion