What metrics would you include in a report to evaluate employee training effectiveness in phishing protection?

To assess the effectiveness of employee training on phishing protection, the following indicators can be included:

• Percentage of successfully completed tests: how many employees correctly identify phishing emails in control tests.
• Number of phishing incidents: the number of cases where employees clicked on suspicious links or disclosed data.
• Response time to phishing attacks: how quickly employees report suspicious emails.
• Awareness level: survey or questionnaire results on the topic of phishing.
• Change dynamics: comparison of indicators before and after training.

These metrics will help understand how much the training has improved employee security awareness and vigilance.