Exam CISM topic 1 question 275 discussion

clearly, decrease the number of incidents.

It is a phishing test not a real incident

B is objective

D. I think D would be the Best way since decrease number of incidents don't necessary translates to program improvement. However; improved feedback or improved reports is the best indicator. It's like installing a new security system after completion you expect to get more alerts than your previous aka improved feedback..

B is distractor

Nubmer of incidents can raise even if good training performed. Only feedback can be correlated to training

The correct answer is B. Decreased number of incidents that have occurred. Explanation: Among the options provided, the decreased number of incidents that have occurred is the best demonstration that an anti-phishing campaign is effective. Here's why this option is the best choice: B. Decreased number of incidents that have occurred: The primary goal of an anti-phishing campaign is to reduce the number of successful phishing attacks and incidents. A decrease in the number of incidents indicates that the campaign's educational efforts and awareness training are helping employees recognize and avoid phishing attempts. C. Decreased number of phishing emails received: While a decrease in the number of phishing emails received is positive, it may not solely indicate that the campaign is effective, as attackers can change tactics.

B. Decreased number of incidents that have occurred

Decrease number of incidents related to phishing attacks. B

B. Decreased number of incidents -> As people are aware of phishing attacks as part of the training/campaign, they will not fall prey to any phishing attacks launched by an attacker.