Evaluation of Security Training and Awareness Programs: Review of Current Practices and Guideline
This work addresses the need for better evaluation methods in security training for organizations, but it appears incremental as it builds on existing literature and practices.
The paper tackles the problem of evaluating security training and awareness programs by reviewing current practices and developing guidelines to measure their effectiveness, aiming to minimize human security risks in organizations.
Evaluating the effectiveness of security awareness and training programs is critical for minimizing organizations' human security risk. Based on a literature review and industry interviews, we discuss current practices and devise guidelines for measuring the effectiveness of security training and awareness initiatives used by organizations