“What does not get measured, does not get done,” or at best, ‘does
not get done right.’ Because, how do you know it got done right if we
do not have measurements of anything? That is why effective Security Awareness
programs uses measurements and bench-marking techniques to track the quantity
and quality of communication, its impact, and the degree to which it achieved
its objectives. An evaluation process should reflect and answer whether or not
the original objectives/goals of the security awareness program have been achieved.
This document is in pdf format. To view it click here.