Which of the following metrics would be MOST helpful to management in understanding the effectiveness of the organization’s security awareness controls?

A. Number of false positive alerts in a given time frame

B. Number of employees who have not completed training

C. Number of data exfiltration attempts

D. Number of malware incidents identified on a system








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.