A company has implemented a new security awareness training program. After six months, the security team wants to evaluate its effectiveness. Which combination of metrics would provide the most balanced view of the program's impact?

Phishing simulation click rates and the number of security incidents reported by employees.

Training completion rates and the average score on the end-of-training quiz.

The cost of the training program and the number of training hours completed.

The number of training sessions delivered and the number of employees who attended.

Certified Information Systems Security Professional

Domain 1Objective 12

1.12 - Establish and Maintain a Security Awareness, Education, and Training Program CISSP Practice Questions (Page 5)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

3concepts

16%of the exam

Questions 21–21

21application · medium
A company has implemented a new security awareness training program. After six months, the security team wants to evaluate its effectiveness. Which combination of metrics would provide the most balanced view of the program's impact?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

1.12 - Establish and Maintain a Security Awareness, Education, and Training Program CISSP Practice Questions (Page 5)

Questions 21–21

A company has implemented a new security awareness training program. After six months, the security team wants to evaluate its effectiveness. Which combination of metrics would provide the most balanced view of the program's impact?

Keep studying — Security and Risk Management