What is the best measurement of whether employees are following policies?
A. The actual reduction in risk
B. The number of people aware of the policy
C. Many players are involved in the process of security policy implementation
D. The number of employees understand the security policy concepts
FUD
