CISA Practice Question (not copied from any official resource - the copyright is mine)

N.B. posting this is not copyright infringement - it's not copied from anyone else's resource/documentation.

Which of the following provides the BEST evidence of the adequacy of a security awareness program?

A) Frequency and thoroughness of employee training sessions

B) High participation rate in security training programs

C) Low number of security incidents attributed to human error

D) Regular updates to the security awareness materials

Comment with your answer!