How we measure effectiveness of security awareness programs.
Initial
We can check with concrete data like:
- How much phishing attacks fallen for before vs now
- How much credential leaking before vs now
Recurrent
Checking with data for a period of time.
- How much phishing attacks 6 months ago vs now