Study. uk . com
  1. Home
  2. All questions
  3. Question 696

CISM study material · question 696 of 1000

For evaluating cybersecurity awareness training, which approach does NIST prefer?

  1. Completion rates and the results of review quizzes, rather than rating participation as low, medium or high
  2. The number of courses offered in the catalogue
  3. An annual satisfaction survey of participants
  4. A qualitative rating agreed by the training team after each delivery, recorded as low, medium or high against the session
Show the answer

Answer: A. Completion rates and the results of review quizzes, rather than rating participation as low, medium or high

SP 800-55v1 uses awareness training as its illustration, preferring completion rates and quiz results over labelling participation high, medium or low.

Source: NIST SP 800-55 Vol. 1 (NIST) — Sec. 2.4 Metrics

Challenge yourself on this topic → Study as cards