A company has recently begun to provide internal security awareness for employees. Which of the
following would be used to demonstrate the effectiveness of the training?
A.
Metrics
B.
Business impact analysis
C.
Certificate of completion
D.
Policies
A certificate of completion does nothing to provide evidence of validity. You need to establish metrics-A
Right on!
Agreed for A.