Chapter 11 of 11 · Stop the Attack

Measuring awareness: metrics that matter

Good metrics show whether behaviour is changing.

  • By Thilanka Dilshan
  • Updated October 7, 2026

Good metrics show whether behaviour is changing. Report rate, time to report and repeat clickers say more than completion rates for training.

What this means in practice

A useful test is to ask who would act on this tomorrow morning and what they would need. If the answer is unclear, the gap is organisational rather than technical, and that is usually the cheaper one to close.

Key actions

  • Track report rate and time to report
  • Follow up with repeat clickers
  • Share trends with management

Next steps

Use the numbers to target training where it helps most. Keep the first version short. A one-page routine that people follow beats a long document nobody reads.

Thilanka Dilshan

Get a 30-Minute Security Briefing.
No Pitch Deck.

Talk to a Sweden-based analyst. We'll review your posture, map your gaps and give you a clear picture of where you stand, in plain language.

Book a Free Briefing
No commitment Sweden-based analyst