MENU
Management has required information security awareness training to reduce the risk associated with credential compromise. What is the BEST way to assess the effectiveness of the training?
Suggested Answer: B
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
SA
Santos
10 months ago
D is important too, but not really for assessing training effectiveness.
CI
Ciara
11 months ago
Wait, can a quiz really measure if they’ll handle real threats?
MA
Mattie
11 months ago
B seems more about the materials than actual effectiveness.
LA
Laura
11 months ago
Totally agree with A! It's the best way to see if they really learned anything.
BE
Bette
11 months ago
I think A is the best option. Real-world testing shows true effectiveness.
AR
Ariel
12 months ago
Performing a vulnerability assessment seems too broad for this question; I think it’s more about individual awareness than system weaknesses.
AL
Alverta
12 months ago
I feel like an end-of-training quiz is a straightforward way to assess knowledge, but I wonder if it really reflects real-world application.
MA
Mable
12 months ago
I think auditing the training materials could help ensure they're up to date, but it doesn't really test if people actually learned anything.
NA
Nathan
1 year ago
I remember discussing how social engineering tests can really show if employees are applying what they learned, but I'm not sure if that's the best measure.
RU
Ruthann
1 year ago
I'm feeling pretty confident about this one. The answer has to be option C - administering an end-of-training quiz. That's the most direct way to evaluate how much the employees have learned from the training.
VA
Val
1 year ago
I'm a little confused on this one. Wouldn't auditing the training materials be a good way to check the quality of the content? Or is that not the best approach for assessing the actual effectiveness?
IN
India
1 year ago
Okay, I think I've got it. The best way to assess the effectiveness of the training is to conduct social engineering testing. That will really put the employees' knowledge to the test and show if the training is working.
EL
Elvera
1 year ago
This seems like a tricky one. I'm not sure if I should go with the social engineering testing or the end-of-training quiz. Hmm, let me think this through.
TR
Trina
1 year ago
Hmm, not sure about this one. The prompt is a bit vague, and I'm not totally clear on what they're looking for in terms of "strategic quality and planning." Guess I'll have to think it through step-by-step.
AL
Alyce
1 year ago
Wait, they're testing our security awareness, so shouldn't we all just choose D) and try to hack the system? That's the real test, right?
NA
Natalya
1 year ago
We should focus on understanding the material and applying it to our daily work to show that the training is effective.
EL
Elza
1 year ago
I agree, choosing D) and trying to hack the system is not the way to assess the effectiveness of the training.
TU
Tuyet
1 year ago
No, that's not the right approach. We should take the training seriously and follow the guidelines.
SI
Simona
1 year ago
A) Conduct social engineering testing? That's like trying to catch someone in the act. I'd rather just give them the good ol' quiz, C).
ST
Stephanie
1 year ago
Hmm, D) Perform a vulnerability assessment? Seems a bit overkill for just checking the training. I'll stick with C) - nice and straightforward.
JU
Juan
1 year ago
C) Monitor employee behavior for changes in security practices
SI
Simona
1 year ago
B) Distribute a survey to employees to gauge their understanding
VI
Vi
1 year ago
A) Conduct a phishing simulation to test employee response
CU
Curt
1 year ago
I'm going with B) Audit security awareness training materials. Checking the content is key to ensuring the training is effective.
CA
Cammy
1 year ago
I think conducting social engineering testing could also be helpful to see if employees are applying what they learned in the training.
CH
Chandra
1 year ago
That's a good choice. It's important to make sure the training materials are accurate and up to date.
KE
Kenneth
1 year ago
C) Administer an end-of-training quiz seems like the obvious choice here. Gotta test that knowledge, you know?
CA
Carma
2 years ago
I believe administering an end-of-training quiz would also be a good way to assess the effectiveness of the training.
CO
Cordelia
2 years ago
I agree with Jovita, social engineering testing can really show if the training is effective.
JO
Jovita
2 years ago
I think the best way is to conduct social engineering testing.