The SANS Institute is offering a set of free metric tools designed to give security leaders the ability to track and measure the impact of their own security awareness programs. The tools can be used to improve training, demonstrate return on investment, or compare an organizations human risk to other organizations in an industry. All resources are free, developed by the community for the community, said Lance Spitzner, training director for the program, said Spitzer. “Good metrics are hard. They have to be easy to measure (preferably automated) and they have to something you can take action on””]
Source: https://www.csoonline.com/article/2132367/using-security-metrics-to-measure-human-awareness.html