Certified in Risk and Information Systems Control (CRISC) — Question 35

An IT department has organized training sessions to improve user awareness of organizational information security policies. Which of the following is the BEST key performance indicator (KPI) to reflect effectiveness of the training?

Answer options

• A. Number of training sessions completed
• B. Percentage of staff members who complete the training with a passing score
• C. Percentage of attendees versus total staff
• D. Percentage of staff members who attend the training with positive feedback

Correct answer: B

Explanation

The correct answer is B because the percentage of staff members who complete the training with a passing score directly measures the effectiveness of the training in imparting knowledge. Options A and C do not assess the quality of understanding, and D, while useful, focuses on feedback rather than knowledge retention.