Practical guide
How to measure a security awareness programme
Course completion alone is not enough. Monitor topic coverage, verification results, behaviour and development over time.
Completion and knowledge measures
Completion shows whether people took a course, while tests indicate understanding. Neither alone proves behaviour change, so also monitor repeated attempts, difficult topics and target-group differences.
Results of practical exercises
Practical exercises show whether employees recognise suspicious situations and report them correctly. Interpret results in context of scenario difficulty and previous education.
Interpreting trends
Long-term trends matter more than one value. Check whether reporting improves, repeated mistakes decline and the plan covers all important topics and groups.