Users are the easiest targets for attacks from cyberspace. Preventive actions play
a significant role in protection, one form of prevention is Cybersecurity Awareness.
To get feedback on the effectiveness of awareness, measurements need to be taken.
Measuring the results and effectiveness of security awareness programs is more difficult
than follow-up surveys after training and education. The impact of awareness-raising
on cognitive abilities must be measured, i.e. the extent to which the correct response
occurs after threats are perceived and recognised. This publication presents several
methods and solutions for measuring information security awareness programs, as well
as evaluation methods to assess their effectiveness.
