Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

Security Awareness Training Metrics

QHZ KLUHV XQGHUJRLQJ VHFXULW\ DZDUHQHVV WUDLQLQJ

‰ ‰

HPSOR\HHV XQGHUJRLQJ DQQXDO VHFXULW\ DZDUHQHVV WUDLQLQJ ƒ $OVR E\ GHSDUWPHQW RU UROH ‰ SULYLOHJHG XVHUV UHFHLYLQJ WDUJHWHG UROH EDVHG WUDLQLQJ ‰ VHFXULW\ DZDUHQHVV WUDLQLQJ HYHQWV PRQWKO\ ‰ YLRODWLRQV RI DFFHSWDEOH XVH SROLFLHV E\ DXWKRUL]HG XVHUV

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

‰ 4XDUWHUO\ 0HWULFV ƒ 3HUFHQWDJH RI HPSOR\HHV ZKR ³IDLO´ UHJXODUO\ VFKHGXOHG SKLVKLQJ WHVWV Example Security Metric - Phishing

0HHWV &ULWHULD Factual

Quantitative Comparative Measured consistently Actionable

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ