Certified Information Security Manager (CISM) — Question 434

Which of the following BEST indicates the effectiveness of a recent information security awareness campaign delivered across the organization?

Answer options

• A. Increase in the frequency of security incident escalations
• B. Reduction in the impact of security incidents
• C. Decrease in the number of security incidents
• D. Increase in the number of reported security incidents

Correct answer: D

Explanation

The correct answer, D, indicates that employees are more aware of security issues and are reporting incidents that may have previously gone unreported. Options A, B, and C do not necessarily reflect increased awareness; they could result from various factors unrelated to the effectiveness of the campaign.