Security Awareness For Dummies

Chapter 8

Measuring Performance

IN THIS CHAPTER

Recognizing the hidden costs of awareness efforts

Fulfilling compliance requirements

Assessing engagement

Gauging whether your efforts are paying off

Helping clients see the value of your program

Testing with social engineering and phishing simulations

Recognizing the value of Day 0 metrics

As an awareness program proceeds, no matter what the awareness program involves, security incidents will occur — you can count on it. In response, people, including the managers who determine your budget, may assume that awareness has done little to improve security. At best, the manager may keep the program going just because awareness is “nice to have.”

As I say earlier in this book, you get the budget you deserve, not the budget you need. You need ...