How to Measure Cybersecuirty Awareness

The video discusses the importance of cybersecurity awareness, emphasizing the human element in breaches. It highlights the need for behavior change through security awareness programs and provides a maturity model for organizations. The video also covers how to measure the impact of these programs and the importance of aligning with security teams. It offers guidance on reporting metrics to leadership and outlines steps to start a security awareness program, focusing on key human risks like phishing and passwords.

What percentage of global breaches involve human factors according to the Verizon DVR report?

• 15%

• 50%

• 100%

• 85%

What is the primary goal of a security awareness program?

• To comply with regulations

• To change people's behavior

• To increase technology use

• To reduce training costs

Which stage is NOT a focus of the speaker in the maturity model?

• Cultural Impact

• Behavior Change

• Metrics Framework

• Compliance

What should organizations measure to assess the impact of their security awareness programs?

• Amount of money spent

• Top human risks and behaviors

• Number of employees

• Number of training sessions

What is a key factor to report at the CISO level?

• Number of employees

• Cost of security tools

• Change in people's behavior

• Number of training sessions

Which two human risks are most commonly highlighted in security reports?

• Malware and ransomware

• Phishing and passwords

• Social engineering and insider threats

• Data breaches and hacking

What is the first step in prioritizing security awareness efforts?

• Purchase new security software

• Hire more security personnel

• Identify top human risks

• Start with engagement activities