Question

Following a recent network intrusion, a company wants to determine the current security awareness of all of its employees. Which of the following is the BEST way to test awareness?

A. Conduct a series of security training events with comprehensive tests at the end

B. Hire an external company to provide an independent audit of the network security posture

C. Review the social media of all employees to see how much proprietary information is shared

D. Send an email from a corporate account, requesting users to log onto a website with their enterprise account

Answer 1

Option D will be the best option to find the level of security awareness.

• We should not use our corporate account for any other websites that are not trusted by the organization.
• If the higher officials send any mail like that, we should cross-check once before logging into any website.
• If the people reach the higher officials for confirmation, then the person who reached will be determined as Highly aware of the security checks.
• If any person just logs in without any confirmation from higher concerned officials, then he/she will be marked as the least aware of the security checks.

=========

Please note that all the other options are also correct ones but AMONG THEM, OPTION-D is the BEST ONE..!!!

• we can also give training from others but we will not be able to find the individual's security awareness.
• Social media may not give all the info. about a person. We can't depend on it.