Gartner® Report: How Do You Prove That Your Security Awareness Program is Actually Working?

In a threat environment where the human element accounts for such a high percentage of data breaches, an effective security awareness program remains a critical element of any enterprise security program. However, it is also one of the most challenging initiatives to prove that the investment in time, effort, and hard-won funding helps reduce human-born cyber risks inside an organization. Providers often provide traditional metrics out of the box and are often limited to training completion rates and phishing simulation metrics. 

In this four-minute video, Gartner® provides SRM leaders with three steps to demonstrate the efficacy of their security awareness program in reducing human-born cyber risk in a way that resonates with senior executives and the Board.
 

Gartner, How Do You Prove That Your Security Awareness Program is Actually Working? by Richard Addiscott. 17 August 2021. Gartner is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.