Training program effectiveness KPIs must measure behavioral change—whether training has actually altered how participants act in their work environment—rather than knowledge acquisition or adoption rates. The most meaningful behavioral signal for AI risk awareness training is whether trained users report suspicious activity.
Why B is Correct: According to ISACA AAIR training effectiveness measurement guidance, the number of AI irregularities and potential tampering incidents reported by users is the most appropriate behavioral KPI for risk awareness training effectiveness. When users report unusual AI behavior, this demonstrates they have internalized training concepts well enough to recognize anomalies and understand their obligation to report them. This behavioral change—from passive observation to active reporting—is the intended outcome of awareness training.
Why A is Wrong: Risk rating changes measure risk management process adjustments rather than individual behavioral change from training. Risk ratings reflect aggregate organizational risk, not the specific behavioral impact of an awareness training program.
Why C is Wrong: Ability to identify financial impacts is a knowledge assessment metric—it measures what users know rather than what they do differently as a result of training. Awareness training aims to change behavior, not just inform.
Why D is Wrong: AI adoption rates measure technology uptake, not risk awareness. Higher adoption could indicate confidence in AI systems but does not measure whether employees recognize and report AI risks—the specific objective of risk awareness training.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit