DetectionMeasurementSelection of MetricsRatios, Medians, Means, and Standard DeviationsThe Number of Times an Email Is OpenedThe Number of ClicksInformation Input into FormsActions Taken by the VictimDetection TimeThe Timeliness of Corrective ActionsThe Success of Corrective ActionsRisk RatingsReportingKnowing When to Make a Phone CallWriting the ReportConclusion