Examkin

Soru

Zorluk: KolaySecurity Awareness Programs and Human Risk Management

An enterprise security team wants to evaluate the real-world behavioral impact of its security awareness training program rather than relying solely on compliance statistics. Which of the following metrics provides the best indicator that employees are actively applying security awareness principles to mitigate human risk?

  1. An increase in the percentage of simulated phishing emails reported by employees using the designated reporting toolCevap
  2. B
    A 100% completion rate on mandatory annual security awareness training videos
  3. C
    A reduction in total inbound spam messages blocked by the automated email security gateway
  4. D
    Immediate revocation of email privileges for users who fall for a simulated phishing campaign

Cevap

An increase in the percentage of simulated phishing emails reported by employees using the designated reporting tool
Tracking user reporting rates during simulated phishing exercises directly measures employee vigilance and procedural adherence, serving as a key indicator of effective human risk reduction.

Adım Adım Çözüm

1
Identify the goal of the awareness program evaluation
The goal is to measure positive user behavioral change and active threat detection capability.
Compliance-driven metrics (like video completion) do not confirm operational security readiness.
2
Evaluate metrics against human risk management goals
Reporting simulated phishing messages demonstrates that users recognize suspicious indicators and follow active reporting protocols.
An increased reporting rate directly reduces organizational risk by turning employees into effective security sensors.

Anahtar Kavram

Measuring Security Awareness Program Effectiveness
Tahmini Süre:45s
Bu soruyu puanla

Konular

Security Awareness Programs and Human Risk Management

Bu konudan daha fazla soru