Question

A security awareness manager ran a one-time simulated phishing campaign six months ago. Leadership now wants to know whether employee susceptibility to phishing is actually improving over time. Which change to the awareness program will BEST provide this insight?

Accepted Answer

Conduct recurring phishing campaigns and track click and reporting rates across each cycle

Answer

Add a signed acknowledgement of the acceptable use policy to the onboarding process

Answer

Deploy an email gateway that automatically quarantines suspected phishing messages

Answer

Require all employees to complete a single comprehensive security training module